Added http.withCredentials option, closes #4

docs/options.md

@@ -33,3 +33,4 @@ $RefParser.dereference("my-schema.yaml", {
 |`cache.fs`       |number   |60        |<a name="caching"></a>The length of time (in seconds) to cache local files.  The default is one minute.  Setting to zero will cache forever.
 |`cache.http`     |number   |300       |The length of time (in seconds) to cache HTTP URLs.  The default is five minutes.  Setting to zero will cache forever.
 |`cache.https`    |number   |300       |The length of time (in seconds) to cache HTTPS URLs.  The default is five minutes.  Setting to zero will cache forever.
+|`http.withCredentials`    |bool   |true       |When used in browser specifies `withCredentials` option of `XMLHttpRequest` object. Setting to `false` allows loading via CORS with `Access-Control-Allow-Origin` set to `*`

lib/options.js

@@ -92,6 +92,12 @@ function $RefParserOptions(options) {
     https: 5 * 60 // 5 minutes
   };
 
+  /* http options */
+  this.http = {
+    /* withCredentials option of XMLHttpRequest */
+    withCredentials: true
+  }
+
   merge(options, this);
 }
 

lib/read.js

@@ -178,7 +178,8 @@ function download(protocol, u, options) {
             hostname: u.hostname,
             port: u.port,
             path: u.path,
-            auth: u.auth
+            auth: u.auth,
+            withCredentials: options.http.withCredentials
           },
           onResponse
       );

tests/index.html

@@ -83,6 +83,8 @@
     <script src="specs/callbacks.spec.js"></script>
     <script src="specs/yaml.spec.js"></script>
 
+    <script src="specs/cors.spec.js"></script>
+
     <script>
       mocha.run();
     </script>

tests/specs/cors/cors.spec.js

@@ -0,0 +1,46 @@
+'use strict';
+
+describe('parse from CORS with Access-Control-Allow-Origin: *', function() {
+  var windowOnError, testDone;
+
+  beforeEach(function() {
+    windowOnError = global.onerror;
+    global.onerror = function() {
+      testDone();
+      return true;
+    }
+  });
+
+  afterEach(function() {
+    global.onerror = windowOnError;
+  });
+
+  it('should parse successfully with http.withCredentials = false', function() {
+    var parser = new $RefParser();
+    return parser
+      .parse('http://petstore.swagger.io:80/v2/swagger.json', {
+        http: { withCredentials: false }
+      })
+      .then(function(schema) {
+        expect(schema).to.be.an('object');
+        expect(schema).not.to.be.empty;
+        expect(parser.schema).to.equal(schema);
+      });
+  });
+
+  if (userAgent.isBrowser) {
+    it('should throw error in browser if http.withCredentials = true (default)', function(done) {
+      testDone = done;
+      var parser = new $RefParser();
+      return parser
+        .parse('http://petstore.swagger.io:80/v2/swagger.json', {
+          http: { withCredentials: true }
+        })
+        .then(helper.shouldNotGetCalled)
+        .catch(function(err) {
+          expect(err.message).to.contain('Error downloading file');
+          done();
+        });
+    });
+  }
+});