From 8cbf7772325939a1fab1e5c6f1ce1518758a9c1d Mon Sep 17 00:00:00 2001 From: Tyler Renelle Date: Fri, 8 Mar 2013 15:34:37 -0500 Subject: [PATCH] allow OPTIONS, req.headers.origin || * --- src/server/middleware.coffee | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/server/middleware.coffee b/src/server/middleware.coffee index 0a16aad85a..902b8f3ec4 100644 --- a/src/server/middleware.coffee +++ b/src/server/middleware.coffee @@ -15,7 +15,8 @@ module.exports.view = (req, res, next) -> #CORS middleware module.exports.allowCrossDomain = (req, res, next) -> - res.header "Access-Control-Allow-Origin", '*' - res.header "Access-Control-Allow-Methods", "GET,PUT,POST,DELETE" + console.log req.headers.origin + res.header "Access-Control-Allow-Origin", (req.headers.origin || "*") + res.header "Access-Control-Allow-Methods", "OPTIONS,GET,PUT,POST,DELETE" res.header "Access-Control-Allow-Headers", "Content-Type,x-requested-with,x-api-user,x-api-key" next() \ No newline at end of file