001/* 002 * Copyright (C) 2011 The Guava Authors 003 * 004 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except 005 * in compliance with the License. You may obtain a copy of the License at 006 * 007 * http://www.apache.org/licenses/LICENSE-2.0 008 * 009 * Unless required by applicable law or agreed to in writing, software distributed under the License 010 * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express 011 * or implied. See the License for the specific language governing permissions and limitations under 012 * the License. 013 */ 014 015package com.google.common.net; 016 017import com.google.common.annotations.Beta; 018import com.google.common.annotations.GwtCompatible; 019 020/** 021 * Contains constant definitions for the HTTP header field names. See: 022 * <ul> 023 * <li><a href="http://www.ietf.org/rfc/rfc2109.txt">RFC 2109</a> 024 * <li><a href="http://www.ietf.org/rfc/rfc2183.txt">RFC 2183</a> 025 * <li><a href="http://www.ietf.org/rfc/rfc2616.txt">RFC 2616</a> 026 * <li><a href="http://www.ietf.org/rfc/rfc2965.txt">RFC 2965</a> 027 * <li><a href="http://www.ietf.org/rfc/rfc5988.txt">RFC 5988</a> 028 * </ul> 029 * 030 * 031 * @author Kurt Alfred Kluever 032 * @since 11.0 033 */ 034@GwtCompatible 035public final class HttpHeaders { 036 private HttpHeaders() {} 037 038 // HTTP Request and Response header fields 039 040 /** The HTTP {@code Cache-Control} header field name. */ 041 public static final String CACHE_CONTROL = "Cache-Control"; 042 /** The HTTP {@code Content-Length} header field name. */ 043 public static final String CONTENT_LENGTH = "Content-Length"; 044 /** The HTTP {@code Content-Type} header field name. */ 045 public static final String CONTENT_TYPE = "Content-Type"; 046 /** The HTTP {@code Date} header field name. */ 047 public static final String DATE = "Date"; 048 /** The HTTP {@code Pragma} header field name. */ 049 public static final String PRAGMA = "Pragma"; 050 /** The HTTP {@code Via} header field name. */ 051 public static final String VIA = "Via"; 052 /** The HTTP {@code Warning} header field name. */ 053 public static final String WARNING = "Warning"; 054 055 // HTTP Request header fields 056 057 /** The HTTP {@code Accept} header field name. */ 058 public static final String ACCEPT = "Accept"; 059 /** The HTTP {@code Accept-Charset} header field name. */ 060 public static final String ACCEPT_CHARSET = "Accept-Charset"; 061 /** The HTTP {@code Accept-Encoding} header field name. */ 062 public static final String ACCEPT_ENCODING = "Accept-Encoding"; 063 /** The HTTP {@code Accept-Language} header field name. */ 064 public static final String ACCEPT_LANGUAGE = "Accept-Language"; 065 /** The HTTP {@code Access-Control-Request-Headers} header field name. */ 066 public static final String ACCESS_CONTROL_REQUEST_HEADERS = "Access-Control-Request-Headers"; 067 /** The HTTP {@code Access-Control-Request-Method} header field name. */ 068 public static final String ACCESS_CONTROL_REQUEST_METHOD = "Access-Control-Request-Method"; 069 /** The HTTP {@code Authorization} header field name. */ 070 public static final String AUTHORIZATION = "Authorization"; 071 /** The HTTP {@code Connection} header field name. */ 072 public static final String CONNECTION = "Connection"; 073 /** The HTTP {@code Cookie} header field name. */ 074 public static final String COOKIE = "Cookie"; 075 /** The HTTP {@code Expect} header field name. */ 076 public static final String EXPECT = "Expect"; 077 /** The HTTP {@code From} header field name. */ 078 public static final String FROM = "From"; 079 /** 080 * The HTTP <a href="https://tools.ietf.org/html/rfc7239">{@code Forwarded}</a> header field name. 081 * 082 * @since 20.0 083 */ 084 public static final String FORWARDED = "Forwarded"; 085 /** 086 * The HTTP {@code Follow-Only-When-Prerender-Shown} header field name. 087 * 088 * @since 17.0 089 */ 090 @Beta 091 public static final String FOLLOW_ONLY_WHEN_PRERENDER_SHOWN = "Follow-Only-When-Prerender-Shown"; 092 /** The HTTP {@code Host} header field name. */ 093 public static final String HOST = "Host"; 094 /** The HTTP {@code If-Match} header field name. */ 095 public static final String IF_MATCH = "If-Match"; 096 /** The HTTP {@code If-Modified-Since} header field name. */ 097 public static final String IF_MODIFIED_SINCE = "If-Modified-Since"; 098 /** The HTTP {@code If-None-Match} header field name. */ 099 public static final String IF_NONE_MATCH = "If-None-Match"; 100 /** The HTTP {@code If-Range} header field name. */ 101 public static final String IF_RANGE = "If-Range"; 102 /** The HTTP {@code If-Unmodified-Since} header field name. */ 103 public static final String IF_UNMODIFIED_SINCE = "If-Unmodified-Since"; 104 /** The HTTP {@code Last-Event-ID} header field name. */ 105 public static final String LAST_EVENT_ID = "Last-Event-ID"; 106 /** The HTTP {@code Max-Forwards} header field name. */ 107 public static final String MAX_FORWARDS = "Max-Forwards"; 108 /** The HTTP {@code Origin} header field name. */ 109 public static final String ORIGIN = "Origin"; 110 /** The HTTP {@code Proxy-Authorization} header field name. */ 111 public static final String PROXY_AUTHORIZATION = "Proxy-Authorization"; 112 /** The HTTP {@code Range} header field name. */ 113 public static final String RANGE = "Range"; 114 /** The HTTP {@code Referer} header field name. */ 115 public static final String REFERER = "Referer"; 116 /** 117 * The HTTP <a href="https://www.w3.org/TR/service-workers/#update-algorithm"> 118 * {@code Service-Worker}</a> header field name. 119 */ 120 public static final String SERVICE_WORKER = "Service-Worker"; 121 /** The HTTP {@code TE} header field name. */ 122 public static final String TE = "TE"; 123 /** The HTTP {@code Upgrade} header field name. */ 124 public static final String UPGRADE = "Upgrade"; 125 /** The HTTP {@code User-Agent} header field name. */ 126 public static final String USER_AGENT = "User-Agent"; 127 128 // HTTP Response header fields 129 130 /** The HTTP {@code Accept-Ranges} header field name. */ 131 public static final String ACCEPT_RANGES = "Accept-Ranges"; 132 /** The HTTP {@code Access-Control-Allow-Headers} header field name. */ 133 public static final String ACCESS_CONTROL_ALLOW_HEADERS = "Access-Control-Allow-Headers"; 134 /** The HTTP {@code Access-Control-Allow-Methods} header field name. */ 135 public static final String ACCESS_CONTROL_ALLOW_METHODS = "Access-Control-Allow-Methods"; 136 /** The HTTP {@code Access-Control-Allow-Origin} header field name. */ 137 public static final String ACCESS_CONTROL_ALLOW_ORIGIN = "Access-Control-Allow-Origin"; 138 /** The HTTP {@code Access-Control-Allow-Credentials} header field name. */ 139 public static final String ACCESS_CONTROL_ALLOW_CREDENTIALS = "Access-Control-Allow-Credentials"; 140 /** The HTTP {@code Access-Control-Expose-Headers} header field name. */ 141 public static final String ACCESS_CONTROL_EXPOSE_HEADERS = "Access-Control-Expose-Headers"; 142 /** The HTTP {@code Access-Control-Max-Age} header field name. */ 143 public static final String ACCESS_CONTROL_MAX_AGE = "Access-Control-Max-Age"; 144 /** The HTTP {@code Age} header field name. */ 145 public static final String AGE = "Age"; 146 /** The HTTP {@code Allow} header field name. */ 147 public static final String ALLOW = "Allow"; 148 /** The HTTP {@code Content-Disposition} header field name. */ 149 public static final String CONTENT_DISPOSITION = "Content-Disposition"; 150 /** The HTTP {@code Content-Encoding} header field name. */ 151 public static final String CONTENT_ENCODING = "Content-Encoding"; 152 /** The HTTP {@code Content-Language} header field name. */ 153 public static final String CONTENT_LANGUAGE = "Content-Language"; 154 /** The HTTP {@code Content-Location} header field name. */ 155 public static final String CONTENT_LOCATION = "Content-Location"; 156 /** The HTTP {@code Content-MD5} header field name. */ 157 public static final String CONTENT_MD5 = "Content-MD5"; 158 /** The HTTP {@code Content-Range} header field name. */ 159 public static final String CONTENT_RANGE = "Content-Range"; 160 /** 161 * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-header-field"> 162 * {@code Content-Security-Policy}</a> header field name. 163 * 164 * @since 15.0 165 */ 166 public static final String CONTENT_SECURITY_POLICY = "Content-Security-Policy"; 167 /** 168 * The HTTP <a href="http://w3.org/TR/CSP/#content-security-policy-report-only-header-field"> 169 * {@code Content-Security-Policy-Report-Only}</a> header field name. 170 * 171 * @since 15.0 172 */ 173 public static final String CONTENT_SECURITY_POLICY_REPORT_ONLY = 174 "Content-Security-Policy-Report-Only"; 175 /** 176 * The HTTP nonstandard {@code X-Content-Security-Policy} header field name. It was introduced in 177 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Firefox 178 * until version 23 and the Internet Explorer version 10. 179 * Please, use {@link #CONTENT_SECURITY_POLICY} to pass the CSP. 180 * 181 * @since 20.0 182 */ 183 public static final String X_CONTENT_SECURITY_POLICY = "X-Content-Security-Policy"; 184 /** 185 * The HTTP nonstandard {@code X-Content-Security-Policy-Report-Only} header field name. 186 * It was introduced in <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and 187 * used by the Firefox until version 23 and the Internet Explorer version 10. 188 * Please, use {@link #CONTENT_SECURITY_POLICY_REPORT_ONLY} to pass the CSP. 189 * 190 * @since 20.0 191 */ 192 public static final String X_CONTENT_SECURITY_POLICY_REPORT_ONLY = 193 "X-Content-Security-Policy-Report-Only"; 194 /** 195 * The HTTP nonstandard {@code X-WebKit-CSP} header field name. It was introduced in 196 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Chrome until 197 * version 25. Please, use {@link #CONTENT_SECURITY_POLICY} to pass the CSP. 198 * 199 * @since 20.0 200 */ 201 public static final String X_WEBKIT_CSP = "X-WebKit-CSP"; 202 /** 203 * The HTTP nonstandard {@code X-WebKit-CSP-Report-Only} header field name. It was introduced in 204 * <a href="https://www.w3.org/TR/2011/WD-CSP-20111129/">CSP v.1</a> and used by the Chrome until 205 * version 25. Please, use {@link #CONTENT_SECURITY_POLICY_REPORT_ONLY} to pass the CSP. 206 * 207 * @since 20.0 208 */ 209 public static final String X_WEBKIT_CSP_REPORT_ONLY = "X-WebKit-CSP-Report-Only"; 210 /** The HTTP {@code ETag} header field name. */ 211 public static final String ETAG = "ETag"; 212 /** The HTTP {@code Expires} header field name. */ 213 public static final String EXPIRES = "Expires"; 214 /** The HTTP {@code Last-Modified} header field name. */ 215 public static final String LAST_MODIFIED = "Last-Modified"; 216 /** The HTTP {@code Link} header field name. */ 217 public static final String LINK = "Link"; 218 /** The HTTP {@code Location} header field name. */ 219 public static final String LOCATION = "Location"; 220 /** The HTTP {@code P3P} header field name. Limited browser support. */ 221 public static final String P3P = "P3P"; 222 /** The HTTP {@code Proxy-Authenticate} header field name. */ 223 public static final String PROXY_AUTHENTICATE = "Proxy-Authenticate"; 224 /** The HTTP {@code Refresh} header field name. Non-standard header supported by most browsers. */ 225 public static final String REFRESH = "Refresh"; 226 /** The HTTP {@code Retry-After} header field name. */ 227 public static final String RETRY_AFTER = "Retry-After"; 228 /** The HTTP {@code Server} header field name. */ 229 public static final String SERVER = "Server"; 230 /** 231 * The HTTP <a href="https://www.w3.org/TR/service-workers/#update-algorithm"> 232 * {@code Service-Worker-Allowed}</a> header field name. 233 * 234 * @since 20.0 235 */ 236 public static final String SERVICE_WORKER_ALLOWED = "Service-Worker-Allowed"; 237 /** The HTTP {@code Set-Cookie} header field name. */ 238 public static final String SET_COOKIE = "Set-Cookie"; 239 /** The HTTP {@code Set-Cookie2} header field name. */ 240 public static final String SET_COOKIE2 = "Set-Cookie2"; 241 /** 242 * The HTTP 243 * <a href="http://tools.ietf.org/html/rfc6797#section-6.1">{@code Strict-Transport-Security}</a> 244 * header field name. 245 * 246 * @since 15.0 247 */ 248 public static final String STRICT_TRANSPORT_SECURITY = "Strict-Transport-Security"; 249 /** 250 * The HTTP <a href="http://www.w3.org/TR/resource-timing/#cross-origin-resources"> 251 * {@code Timing-Allow-Origin}</a> header field name. 252 * 253 * @since 15.0 254 */ 255 public static final String TIMING_ALLOW_ORIGIN = "Timing-Allow-Origin"; 256 /** The HTTP {@code Trailer} header field name. */ 257 public static final String TRAILER = "Trailer"; 258 /** The HTTP {@code Transfer-Encoding} header field name. */ 259 public static final String TRANSFER_ENCODING = "Transfer-Encoding"; 260 /** The HTTP {@code Vary} header field name. */ 261 public static final String VARY = "Vary"; 262 /** The HTTP {@code WWW-Authenticate} header field name. */ 263 public static final String WWW_AUTHENTICATE = "WWW-Authenticate"; 264 265 // Common, non-standard HTTP header fields 266 267 /** The HTTP {@code DNT} header field name. */ 268 public static final String DNT = "DNT"; 269 /** The HTTP {@code X-Content-Type-Options} header field name. */ 270 public static final String X_CONTENT_TYPE_OPTIONS = "X-Content-Type-Options"; 271 /** The HTTP {@code X-Do-Not-Track} header field name. */ 272 public static final String X_DO_NOT_TRACK = "X-Do-Not-Track"; 273 /** The HTTP {@code X-Forwarded-For} header field name (superseded by {@code Forwarded}). */ 274 public static final String X_FORWARDED_FOR = "X-Forwarded-For"; 275 /** The HTTP {@code X-Forwarded-Proto} header field name. */ 276 public static final String X_FORWARDED_PROTO = "X-Forwarded-Proto"; 277 /** 278 * The HTTP <a href="http://goo.gl/lQirAH">{@code X-Forwarded-Host}</a> header field name. 279 * 280 * @since 20.0 281 */ 282 public static final String X_FORWARDED_HOST = "X-Forwarded-Host"; 283 /** 284 * The HTTP <a href="http://goo.gl/YtV2at">{@code X-Forwarded-Port}</a> header field name. 285 * 286 * @since 20.0 287 */ 288 public static final String X_FORWARDED_PORT = "X-Forwarded-Port"; 289 /** The HTTP {@code X-Frame-Options} header field name. */ 290 public static final String X_FRAME_OPTIONS = "X-Frame-Options"; 291 /** The HTTP {@code X-Powered-By} header field name. */ 292 public static final String X_POWERED_BY = "X-Powered-By"; 293 /** 294 * The HTTP 295 * <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning">{@code Public-Key-Pins}</a> 296 * header field name. 297 * 298 * @since 15.0 299 */ 300 @Beta public static final String PUBLIC_KEY_PINS = "Public-Key-Pins"; 301 /** 302 * The HTTP <a href="http://tools.ietf.org/html/draft-evans-palmer-key-pinning"> 303 * {@code Public-Key-Pins-Report-Only}</a> header field name. 304 * 305 * @since 15.0 306 */ 307 @Beta public static final String PUBLIC_KEY_PINS_REPORT_ONLY = "Public-Key-Pins-Report-Only"; 308 /** The HTTP {@code X-Requested-With} header field name. */ 309 public static final String X_REQUESTED_WITH = "X-Requested-With"; 310 /** The HTTP {@code X-User-IP} header field name. */ 311 public static final String X_USER_IP = "X-User-IP"; 312 /** The HTTP {@code X-XSS-Protection} header field name. */ 313 public static final String X_XSS_PROTECTION = "X-XSS-Protection"; 314 /** 315 * The HTTP <a href="http://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing"> 316 * {@code Ping-From}</a> header field name. 317 * 318 * @since 19.0 319 */ 320 public static final String PING_FROM = "Ping-From"; 321 /** 322 * The HTTP <a href="http://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing"> 323 * {@code Ping-To}</a> header field name. 324 * 325 * @since 19.0 326 */ 327 public static final String PING_TO = "Ping-To"; 328}