1   /*
2    * Copyright (C) 2011 The Guava Authors
3    *
4    * Licensed under the Apache License, Version 2.0 (the "License");
5    * you may not use this file except in compliance with the License.
6    * You may obtain a copy of the License at
7    *
8    * http://www.apache.org/licenses/LICENSE-2.0
9    *
10   * Unless required by applicable law or agreed to in writing, software
11   * distributed under the License is distributed on an "AS IS" BASIS,
12   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13   * See the License for the specific language governing permissions and
14   * limitations under the License.
15   */
16  
17  package com.google.common.net;
18  
19  import com.google.common.annotations.Beta;
20  import com.google.common.annotations.GwtCompatible;
21  
22  /**
23   * Contains constant definitions for the HTTP header field names. See:
24   * <ul>
25   * <li><a href="http://www.ietf.org/rfc/rfc2109.txt">RFC 2109</a>
26   * <li><a href="http://www.ietf.org/rfc/rfc2183.txt">RFC 2183</a>
27   * <li><a href="http://www.ietf.org/rfc/rfc2616.txt">RFC 2616</a>
28   * <li><a href="http://www.ietf.org/rfc/rfc2965.txt">RFC 2965</a>
29   * <li><a href="http://www.ietf.org/rfc/rfc5988.txt">RFC 5988</a>
30   * </ul>
31   *
32   *
33   * @author Kurt Alfred Kluever
34   * @since 11.0
35   */
36  @GwtCompatible
37  public final class HttpHeaders {
38    private HttpHeaders() {}
39  
40    // HTTP Request and Response header fields
41  
42    /** The HTTP {@code Cache-Control} header field name. */
43    public static final String CACHE_CONTROL = "Cache-Control";
44    /** The HTTP {@code Content-Length} header field name. */
45    public static final String CONTENT_LENGTH = "Content-Length";
46    /** The HTTP {@code Content-Type} header field name. */
47    public static final String CONTENT_TYPE = "Content-Type";
48    /** The HTTP {@code Date} header field name. */
49    public static final String DATE = "Date";
50    /** The HTTP {@code Pragma} header field name. */
51    public static final String PRAGMA = "Pragma";
52    /** The HTTP {@code Via} header field name. */
53    public static final String VIA = "Via";
54    /** The HTTP {@code Warning} header field name. */
55    public static final String WARNING = "Warning";
56  
57    // HTTP Request header fields
58  
59    /** The HTTP {@code Accept} header field name. */
60    public static final String ACCEPT = "Accept";
61    /** The HTTP {@code Accept-Charset} header field name. */
62    public static final String ACCEPT_CHARSET = "Accept-Charset";
63    /** The HTTP {@code Accept-Encoding} header field name. */
64    public static final String ACCEPT_ENCODING = "Accept-Encoding";
65    /** The HTTP {@code Accept-Language} header field name. */
66    public static final String ACCEPT_LANGUAGE = "Accept-Language";
67    /** The HTTP {@code Access-Control-Request-Headers} header field name. */
68    public static final String ACCESS_CONTROL_REQUEST_HEADERS = "Access-Control-Request-Headers";
69    /** The HTTP {@code Access-Control-Request-Method} header field name. */
70    public static final String ACCESS_CONTROL_REQUEST_METHOD = "Access-Control-Request-Method";
71    /** The HTTP {@code Authorization} header field name. */
72    public static final String AUTHORIZATION = "Authorization";
73    /** The HTTP {@code Connection} header field name. */
74    public static final String CONNECTION = "Connection";
75    /** The HTTP {@code Cookie} header field name. */
76    public static final String COOKIE = "Cookie";
77    /** The HTTP {@code Expect} header field name. */
78    public static final String EXPECT = "Expect";
79    /** The HTTP {@code From} header field name. */
80    public static final String FROM = "From";
81    /**
82     * The HTTP {@code Follow-Only-When-Prerender-Shown}</a> header field name.
83     *
84     * @since 17.0
85     */
86    @Beta
87    public static final String FOLLOW_ONLY_WHEN_PRERENDER_SHOWN = "Follow-Only-When-Prerender-Shown";
88    /** The HTTP {@code Host} header field name. */
89    public static final String HOST = "Host";
90    /** The HTTP {@code If-Match} header field name. */
91    public static final String IF_MATCH = "If-Match";
92    /** The HTTP {@code If-Modified-Since} header field name. */
93    public static final String IF_MODIFIED_SINCE = "If-Modified-Since";
94    /** The HTTP {@code If-None-Match} header field name. */
95    public static final String IF_NONE_MATCH = "If-None-Match";
96    /** The HTTP {@code If-Range} header field name. */
97    public static final String IF_RANGE = "If-Range";
98    /** The HTTP {@code If-Unmodified-Since} header field name. */
99    public static final String IF_UNMODIFIED_SINCE = "If-Unmodified-Since";
100   /** The HTTP {@code Last-Event-ID} header field name. */
101   public static final String LAST_EVENT_ID = "Last-Event-ID";
102   /** The HTTP {@code Max-Forwards} header field name. */
103   public static final String MAX_FORWARDS = "Max-Forwards";
104   /** The HTTP {@code Origin} header field name. */
105   public static final String ORIGIN = "Origin";
106   /** The HTTP {@code Proxy-Authorization} header field name. */
107   public static final String PROXY_AUTHORIZATION = "Proxy-Authorization";
108   /** The HTTP {@code Range} header field name. */
109   public static final String RANGE = "Range";
110   /** The HTTP {@code Referer} header field name. */
111   public static final String REFERER = "Referer";
112   /** The HTTP {@code TE} header field name. */
113   public static final String TE = "TE";
114   /** The HTTP {@code Upgrade} header field name. */
115   public static final String UPGRADE = "Upgrade";
116   /** The HTTP {@code User-Agent} header field name. */
117   public static final String USER_AGENT = "User-Agent";
118 
119   // HTTP Response header fields
120 
121   /** The HTTP {@code Accept-Ranges} header field name. */
122   public static final String ACCEPT_RANGES = "Accept-Ranges";
123   /** The HTTP {@code Access-Control-Allow-Headers} header field name. */
124   public static final String ACCESS_CONTROL_ALLOW_HEADERS = "Access-Control-Allow-Headers";
125   /** The HTTP {@code Access-Control-Allow-Methods} header field name. */
126   public static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods";
127   /** The HTTP {@code Access-Control-Allow-Origin} header field name. */
128   public static final String ACCESS_CONTROL_ALLOW_ORIGIN = "Access-Control-Allow-Origin";
129   /** The HTTP {@code Access-Control-Allow-Credentials} header field name. */
130   public static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials";
131   /** The HTTP {@code Access-Control-Expose-Headers} header field name. */
132   public static final String ACCESS_CONTROL_EXPOSE_HEADERS = "Access-Control-Expose-Headers";
133   /** The HTTP {@code Access-Control-Max-Age} header field name. */
134   public static final String ACCESS_CONTROL_MAX_AGE = "Access-Control-Max-Age";
135   /** The HTTP {@code Age} header field name. */
136   public static final String AGE = "Age";
137   /** The HTTP {@code Allow} header field name. */
138   public static final String ALLOW = "Allow";
139   /** The HTTP {@code Content-Disposition} header field name. */
140   public static final String CONTENT_DISPOSITION = "Content-Disposition";
141   /** The HTTP {@code Content-Encoding} header field name. */
142   public static final String CONTENT_ENCODING = "Content-Encoding";
143   /** The HTTP {@code Content-Language} header field name. */
144   public static final String CONTENT_LANGUAGE = "Content-Language";
145   /** The HTTP {@code Content-Location} header field name. */
146   public static final String CONTENT_LOCATION = "Content-Location";
147   /** The HTTP {@code Content-MD5} header field name. */
148   public static final String CONTENT_MD5 = "Content-MD5";
149   /** The HTTP {@code Content-Range} header field name. */
150   public static final String CONTENT_RANGE = "Content-Range";
151   /**
152    * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-header-field">
153    * {@code Content-Security-Policy}</a> header field name.
154    *
155    * @since 15.0
156    */
157   public static final String CONTENT_SECURITY_POLICY = "Content-Security-Policy";
158   /**
159    * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-report-only-header-field">
160    * {@code Content-Security-Policy-Report-Only}</a> header field name.
161    *
162    * @since 15.0
163    */
164   public static final String CONTENT_SECURITY_POLICY_REPORT_ONLY =
165       "Content-Security-Policy-Report-Only";
166   /** The HTTP {@code ETag} header field name. */
167   public static final String ETAG = "ETag";
168   /** The HTTP {@code Expires} header field name. */
169   public static final String EXPIRES = "Expires";
170   /** The HTTP {@code Last-Modified} header field name. */
171   public static final String LAST_MODIFIED = "Last-Modified";
172   /** The HTTP {@code Link} header field name. */
173   public static final String LINK = "Link";
174   /** The HTTP {@code Location} header field name. */
175   public static final String LOCATION = "Location";
176   /** The HTTP {@code P3P} header field name. Limited browser support. */
177   public static final String P3P = "P3P";
178   /** The HTTP {@code Proxy-Authenticate} header field name. */
179   public static final String PROXY_AUTHENTICATE = "Proxy-Authenticate";
180   /** The HTTP {@code Refresh} header field name. Non-standard header supported by most browsers. */
181   public static final String REFRESH = "Refresh";
182   /** The HTTP {@code Retry-After} header field name. */
183   public static final String RETRY_AFTER = "Retry-After";
184   /** The HTTP {@code Server} header field name. */
185   public static final String SERVER = "Server";
186   /** The HTTP {@code Set-Cookie} header field name. */
187   public static final String SET_COOKIE = "Set-Cookie";
188   /** The HTTP {@code Set-Cookie2} header field name. */
189   public static final String SET_COOKIE2 = "Set-Cookie2";
190   /**
191    * The HTTP <a href="http://tools.ietf.org/html/rfc6797#section-6.1">
192    * {@code Strict-Transport-Security}</a> header field name.
193    *
194    * @since 15.0
195    */
196   public static final String STRICT_TRANSPORT_SECURITY = "Strict-Transport-Security";
197   /**
198    * The HTTP <a href="http://www.w3.org/TR/resource-timing/#cross-origin-resources">
199    * {@code Timing-Allow-Origin}</a> header field name.
200    *
201    * @since 15.0
202    */
203   public static final String TIMING_ALLOW_ORIGIN = "Timing-Allow-Origin";
204   /** The HTTP {@code Trailer} header field name. */
205   public static final String TRAILER = "Trailer";
206   /** The HTTP {@code Transfer-Encoding} header field name. */
207   public static final String TRANSFER_ENCODING = "Transfer-Encoding";
208   /** The HTTP {@code Vary} header field name. */
209   public static final String VARY = "Vary";
210   /** The HTTP {@code WWW-Authenticate} header field name. */
211   public static final String WWW_AUTHENTICATE = "WWW-Authenticate";
212 
213   // Common, non-standard HTTP header fields
214 
215   /** The HTTP {@code DNT} header field name. */
216   public static final String DNT = "DNT";
217   /** The HTTP {@code X-Content-Type-Options} header field name. */
218   public static final String X_CONTENT_TYPE_OPTIONS = "X-Content-Type-Options";
219   /** The HTTP {@code X-Do-Not-Track} header field name. */
220   public static final String X_DO_NOT_TRACK = "X-Do-Not-Track";
221   /** The HTTP {@code X-Forwarded-For} header field name. */
222   public static final String X_FORWARDED_FOR = "X-Forwarded-For";
223   /** The HTTP {@code X-Forwarded-Proto} header field name. */
224   public static final String X_FORWARDED_PROTO = "X-Forwarded-Proto";
225   /** The HTTP {@code X-Frame-Options} header field name. */
226   public static final String X_FRAME_OPTIONS = "X-Frame-Options";
227   /** The HTTP {@code X-Powered-By} header field name. */
228   public static final String X_POWERED_BY = "X-Powered-By";
229   /**
230    * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">
231    * {@code Public-Key-Pins}</a> header field name.
232    *
233    * @since 15.0
234    */
235   @Beta
236   public static final String PUBLIC_KEY_PINS = "Public-Key-Pins";
237   /**
238    * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">
239    * {@code Public-Key-Pins-Report-Only}</a> header field name.
240    *
241    * @since 15.0
242    */
243   @Beta
244   public static final String PUBLIC_KEY_PINS_REPORT_ONLY = "Public-Key-Pins-Report-Only";
245   /** The HTTP {@code X-Requested-With} header field name. */
246   public static final String X_REQUESTED_WITH = "X-Requested-With";
247   /** The HTTP {@code X-User-IP} header field name. */
248   public static final String X_USER_IP = "X-User-IP";
249   /** The HTTP {@code X-XSS-Protection} header field name. */
250   public static final String X_XSS_PROTECTION = "X-XSS-Protection";
251 }