Ticket #17449: ticket-17449-default-options.patch

docs/ref/request-response.txt

@@ -748 +748 @@
     The constructor doesn't take any arguments. Use this to designate that a
     page hasn't been modified since the user's last request (status code 304).
 
+.. class:: HttpResponseOptions
+
+    Like :class:`HttpResponse`, but uses a 200 status code and provides
+    an ``Allow`` response header. Takes a single, required argument: a list
+    of permitted methods (e.g., ``['GET', 'POST']``) used to populate
+    the ``Allow`` header.
+
 .. class:: HttpResponseBadRequest
 
     Acts just like :class:`HttpResponse` but uses a 400 status code.

tests/regressiontests/generic_views/base.py

@@ -170 +170 @@
         """
         self.assertTrue(DecoratedDispatchView.as_view().is_decorated)
 
+    def test_head_no_get(self):
+        """
+        Test that a view class with no get responds to a HEAD request with HTTP
+        405.
+        """
+        request = self.rf.head('/')
+        view = PostOnlyView.as_view()
+        self.assertEqual(405, view(request).status_code)
 
+    def test_options(self):
+        """
+        Test that views respond to HTTP OPTIONS requests with an Allow header
+        appropriate for the methods implemented by the view class.
+        """
+        request = self.rf.options('/')
+        view = SimpleView.as_view()
+        response = view(request)
+        self.assertEqual(200, response.status_code)
+        self.assertTrue(response['Allow'])
+
+    def test_options_for_get_view(self):
+        """
+        Test that a view implementing GET allows GET and HEAD.
+        """
+        request = self.rf.options('/')
+        view = SimpleView.as_view()
+        response = view(request)
+        self._assert_allows(response, 'GET', 'HEAD')
+
+    def test_options_for_get_and_post_view(self):
+        """
+        Test that a view implementing GET and POST allows GET, HEAD, and POST.
+        """
+        request = self.rf.options('/')
+        view = SimplePostView.as_view()
+        response = view(request)
+        self._assert_allows(response, 'GET', 'HEAD', 'POST')
+
+    def test_options_for_post_view(self):
+        """
+        Test that a view implementing POST allows POST.
+        """
+        request = self.rf.options('/')
+        view = PostOnlyView.as_view()
+        response = view(request)
+        self._assert_allows(response, 'POST')
+
+    def _assert_allows(self, response, *expected_methods):
+        "Assert allowed HTTP methods reported in the Allow response header"
+        response_allows = set(response['Allow'].split(', '))
+        self.assertEqual(set(expected_methods + ('OPTIONS',)), response_allows)
+
+
 class TemplateViewTest(TestCase):
     urls = 'regressiontests.generic_views.urls'
 

django/http/__init__.py

@@ -726 +726 @@
             raise Exception("This %s instance cannot tell its position" % self.__class__)
         return sum([len(str(chunk)) for chunk in self._container])
 
+class HttpResponseOptions(HttpResponse):
+    status_code = 200
+
+    def __init__(self, permitted_methods):
+        super(HttpResponseOptions, self).__init__()
+        self['Allow'] = ', '.join(permitted_methods)
+        self['Content-Length'] = '0'
+
 class HttpResponseRedirect(HttpResponse):
     status_code = 302
 

django/views/generic/base.py

@@ -69 +69 @@
         return handler(request, *args, **kwargs)
 
     def http_method_not_allowed(self, request, *args, **kwargs):
-        allowed_methods = [m for m in self.http_method_names if hasattr(self, m)]
         logger.warning('Method Not Allowed (%s): %s', request.method, request.path,
             extra={
                 'status_code': 405,
                 'request': self.request
             }
         )
-        return http.HttpResponseNotAllowed(allowed_methods)
+        return http.HttpResponseNotAllowed(self._allowed_methods())
 
+    def options(self, request, *args, **kwargs):
+        return http.HttpResponseOptions(self._allowed_methods())
 
+    def _allowed_methods(self):
+        return [m.upper() for m in self.http_method_names if hasattr(self, m)]
+
+
 class TemplateResponseMixin(object):
     """
     A mixin that can be used to render a template.