scube/scube-server
3
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Allow API consumer to send credentials on cross-origin requests

Browse Source
This commit is contained in:
Thibault Jouan 2012-03-13 21:12:24 +00:00
parent 196ea16a94
commit 499b06c9e5
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
app/controllers/api/application_controller.rb
View File

@ -3,6 +3,7 @@ class Api::ApplicationController < ApplicationController
def cor_filter def cor_filter
headers['Access-Control-Allow-Origin'] = request.headers['Origin'] headers['Access-Control-Allow-Origin'] = request.headers['Origin']
headers['Access-Control-Allow-Credentials'] = 'true'
end end
def cor_preflight def cor_preflight

2
spec/integration/api/cross_origin_request_spec.rb
View File

@ -24,6 +24,7 @@ feature 'API cross origin request' do
) )
response.headers['Access-Control-Allow-Origin'].should == origin response.headers['Access-Control-Allow-Origin'].should == origin
response.headers['Access-Control-Allow-Credentials'].should == 'true'
response.headers['Access-Control-Allow-Methods'].should == response.headers['Access-Control-Allow-Methods'].should ==
'GET, POST, PUT, DELETE' 'GET, POST, PUT, DELETE'
response.headers['Access-Control-Allow-Headers'].should == response.headers['Access-Control-Allow-Headers'].should ==
@ -37,5 +38,6 @@ feature 'API cross origin request' do
} }
response.headers['Access-Control-Allow-Origin'].should == origin response.headers['Access-Control-Allow-Origin'].should == origin
response.headers['Access-Control-Allow-Credentials'].should == 'true'
end end
end end