allow OPTIONS, req.headers.origin || *

This commit is contained in:
Tyler Renelle 2013-03-08 15:34:37 -05:00
parent 75c1a38beb
commit 8cbf777232

View file

@ -15,7 +15,8 @@ module.exports.view = (req, res, next) ->
#CORS middleware
module.exports.allowCrossDomain = (req, res, next) ->
res.header "Access-Control-Allow-Origin", '*'
res.header "Access-Control-Allow-Methods", "GET,PUT,POST,DELETE"
console.log req.headers.origin
res.header "Access-Control-Allow-Origin", (req.headers.origin || "*")
res.header "Access-Control-Allow-Methods", "OPTIONS,GET,PUT,POST,DELETE"
res.header "Access-Control-Allow-Headers", "Content-Type,x-requested-with,x-api-user,x-api-key"
next()