BTCPrivate
/
bitcore-wallet-service
mirror of https://github.com/BTCPrivate/bitcore-wallet-service.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fix access-control-header for web clients

This commit is contained in:
Gustavo Maximiliano Cortez 2015-03-06 18:02:55 -03:00
parent 20d4d279b7
commit 5788f191b1
1 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
lib/expressapp.js
View File

@ -27,18 +27,26 @@ ExpressApp.start = function(opts) {
WalletService.initialize(opts.WalletService);
var app = express();
app.use(function(req, res, next) {
res.setHeader('Access-Control-Allow-Origin', '*');
if (req.headers.cookie) {
res.setHeader('Access-Control-Allow-Origin', '*');
}
else {
res.setHeader('Access-Control-Allow-Origin', req.headers.origin);
}
res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, DELETE');
res.setHeader('Access-Control-Allow-Headers', 'X-Requested-With,Content-Type,Authorization');
res.setHeader('Access-Control-Allow-Headers', 'x-signature,x-identity,X-Requested-With,Content-Type,Authorization');
next();
});
var allowCORS = function(req, res, next) {
if ('OPTIONS' == req.method) {
res.sendStatus(200);
var headers = {};
headers['Access-Control-Allow-Credentials'] = true;
res.writeHead(200, headers);
res.end();
return;
}
next();
else {
next();
}
}
app.use(allowCORS);