// tag::copyright[]
/*
* Copyright 2014-2025 Ping Identity Corporation. All Rights Reserved
*
* This code is to be used exclusively in connection with Ping Identity
* Corporation software or services. Ping Identity Corporation only offers
* such software or services to legal entities who have entered into a
* binding license agreement with Ping Identity Corporation.
*/
// end::copyright[]
/*
* This simplistic dispatcher matches the path part of the HTTP request.
* If the path is /mylogin, it checks Username and Password headers,
* accepting bjensen:H1falutin, and returning HTTP 403 Forbidden to others.
* Otherwise it returns HTTP 401 Unauthorized.
*/
// Rather than returning a Promise of a Response from an external source,
// this script returns the response itself.
response = new Response(Status.OK);
switch (request.uri.path) {
case "/mylogin":
if (request.headers.Username.values[0] == "bjensen" &&
request.headers.Password.values[0] == "H1falutin") {
response.status = Status.OK
response.entity = "Welcome back, Babs!
"
} else {
response.status = Status.FORBIDDEN
response.entity = "Authorization required
"
}
break
default:
response.status = Status.UNAUTHORIZED
response.entity = "Please log in.
"
break
}
// Return the locally created response, no need to wrap it into a Promise
return response