2f87153df9
If there is an error somewhere along the line (like in DB connection management), it should not interfere with returning proper result for OPTIONS request. Otherwise it's hard to guess why the actual request in the browser was not properly sent.
21 lines
714 B
Ruby
21 lines
714 B
Ruby
require 'travis/api/app'
|
|
|
|
class Travis::Api::App
|
|
# Implements Cross-Origin Resource Sharing. Supported by all major browsers.
|
|
# See http://www.w3.org/TR/cors/
|
|
#
|
|
# TODO: Be smarter about origin.
|
|
class Cors < Base
|
|
before do
|
|
headers['Access-Control-Allow-Origin'] = "*"
|
|
headers['Access-Control-Allow-Credentials'] = "true"
|
|
headers['Access-Control-Expose-Headers'] = "Content-Type, Cache-Control, Expires, Etag, Last-Modified"
|
|
end
|
|
|
|
options // do
|
|
headers['Access-Control-Allow-Methods'] = "HEAD, GET, POST, PATCH, PUT, DELETE"
|
|
headers['Access-Control-Allow-Headers'] = "Content-Type, Authorization, Accept, If-None-Match, If-Modified-Since"
|
|
end
|
|
end
|
|
end
|