Method __call__

src/google/adk/cli/api_server.py:234–276

(
      self,
      scope: dict[str, Any],
      receive: Any,
      send: Any,
  )

    self._allowed_origin_regex = allowed_origin_regex

  async def __call__(
      self,
      scope: dict[str, Any],
      receive: Any,
      send: Any,
  ) -> None:
    if scope["type"] != "http":
      await self._app(scope, receive, send)
      return

    method = scope.get("method", "GET")
    if method in _SAFE_HTTP_METHODS:
      await self._app(scope, receive, send)
      return

    origin = _get_scope_header(scope, b"origin")
    if origin is None:
      await self._app(scope, receive, send)
      return

    if _is_request_origin_allowed(
        origin,
        scope,
        self._allowed_origins,
        self._allowed_origin_regex,
        self._has_configured_allowed_origins,
    ):
      await self._app(scope, receive, send)
      return

    response_body = b"Forbidden: origin not allowed"
    await send({
        "type": "http.response.start",
        "status": 403,
        "headers": [
            (b"content-type", b"text/plain"),
            (b"content-length", str(len(response_body)).encode()),
        ],
    })
    await send({
        "type": "http.response.body",
        "body": response_body,
    })


class _DefaultAppRewriteMiddleware: