awkoren
diff --git a/‎functions/cors/README.md
Copy file name to clipboardExpand all lines: functions/cors/README.md
-11Lines changed: 0 additions & 11 deletions b/‎functions/cors/README.md
Copy file name to clipboardExpand all lines: functions/cors/README.md
-11Lines changed: 0 additions & 11 deletions
diff --git a/‎functions/cors/main.py
Copy file name to clipboardExpand all lines: functions/cors/main.py
-65Lines changed: 0 additions & 65 deletions b/‎functions/cors/main.py
Copy file name to clipboardExpand all lines: functions/cors/main.py
-65Lines changed: 0 additions & 65 deletions
diff --git a/‎functions/http/main.py
Copy file name to clipboardExpand all lines: functions/http/main.py
+53Lines changed: 53 additions & 0 deletions b/‎functions/http/main.py
Copy file name to clipboardExpand all lines: functions/http/main.py
+53Lines changed: 53 additions & 0 deletions
diff --git a/‎functions/cors/main_test.py renamed to ‎functions/http/main_test.py
Copy file name to clipboard b/‎functions/cors/main_test.py renamed to ‎functions/http/main_test.py
Copy file name to clipboard
@@ -118,3 +118,56 @@ def get_signed_url(request):
 
     return url
 # [END functions_http_signed_url]
+
+
+# [START functions_http_cors]
+def cors_enabled_function(request):
+    # Set CORS headers for the preflight request
+    # e.g. allows GETs from any origin with the Content-Type header
+    # and cache preflight response for an 3600s
+
+    # Send response to OPTIONS requests and terminate the function execution
+    if request.method == 'OPTIONS':
+        headers = {
+            'Access-Control-Allow-Origin': '*',
+            'Access-Control-Allow-Methods': 'GET',
+            'Access-Control-Allow-Headers': 'Content-Type',
+            'Access-Control-Max-Age': '3600'
+        }
+
+        return ('', 204, headers)
+
+    # Set CORS headers for the main request
+    headers = {
+        'Access-Control-Allow-Origin': '*'
+    }
+
+    return ('Hello World!', 200, headers)
+# [END functions_http_cors]
+
+
+# [START functions_http_cors_auth]
+def cors_enabled_function_auth(request):
+    # Set CORS headers for preflight requests
+    # e.g. allows GETS from origin https://mydomain.com with Authorization
+    # header
+
+    # Send response to OPTIONS requests and terminate the function execution
+    if request.method == 'OPTIONS':
+        headers = {
+            'Access-Control-Allow-Origin': 'https://mydomain.com',
+            'Access-Control-Allow-Methods': 'GET',
+            'Access-Control-Allow-Headers': 'Authorization',
+            'Access-Control-Max-Age': '3600',
+            'Access-Control-Allow-Credentials': 'true'
+        }
+        return ('', 204, headers)
+
+    # Set CORS headers for main requests
+    headers = {
+        'Access-Control-Allow-Origin': 'https://mydomain.com',
+        'Access-Control-Allow-Credentials': 'true'
+    }
+
+    return ('Hello World!', 200, headers)
+# [END functions_http_cors_auth]