cartodb/CartoDB-SQL-API
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

adding Authorization to Access-Control-Allow-Headers

Browse Source
This commit is contained in:
Simon Martín 2019-01-10 15:55:08 +01:00
parent 68b2b1970a
commit 60702faa57
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/middlewares/cors.js
View File

@ -2,7 +2,7 @@
module.exports = function cors(extraHeaders) { module.exports = function cors(extraHeaders) {
return function(req, res, next) { return function(req, res, next) {
var baseHeaders = 'X-Requested-With, X-Prototype-Version, X-CSRF-Token'; var baseHeaders = 'X-Requested-With, X-Prototype-Version, X-CSRF-Token, Authorization';
if(extraHeaders) { if(extraHeaders) {
baseHeaders += ', ' + extraHeaders; baseHeaders += ', ' + extraHeaders;

8
test/acceptance/app-configuration.js
View File

@ -60,7 +60,8 @@ describe('app-configuration', function() {
method: 'GET' method: 'GET'
}, RESPONSE_OK, function(err, res) { }, RESPONSE_OK, function(err, res) {
assert.equal( assert.equal(
res.headers['access-control-allow-headers'], 'X-Requested-With, X-Prototype-Version, X-CSRF-Token' res.headers['access-control-allow-headers'],
'X-Requested-With, X-Prototype-Version, X-CSRF-Token, Authorization'
); );
assert.equal(res.headers['access-control-allow-origin'], '*'); assert.equal(res.headers['access-control-allow-origin'], '*');
done(); done();
@ -76,7 +77,8 @@ describe('app-configuration', function() {
}, RESPONSE_OK, function(err, res) { }, RESPONSE_OK, function(err, res) {
assert.equal(res.body, ''); assert.equal(res.body, '');
assert.equal( assert.equal(
res.headers['access-control-allow-headers'], 'X-Requested-With, X-Prototype-Version, X-CSRF-Token' res.headers['access-control-allow-headers'],
'X-Requested-With, X-Prototype-Version, X-CSRF-Token, Authorization'
); );
assert.equal(res.headers['access-control-allow-origin'], '*'); assert.equal(res.headers['access-control-allow-origin'], '*');
done(); done();
@ -158,7 +160,7 @@ describe('app-configuration', function() {
assert.equal(res.headers['access-control-allow-origin'], '*'); assert.equal(res.headers['access-control-allow-origin'], '*');
assert.equal( assert.equal(
res.headers['access-control-allow-headers'], res.headers['access-control-allow-headers'],
"X-Requested-With, X-Prototype-Version, X-CSRF-Token" "X-Requested-With, X-Prototype-Version, X-CSRF-Token, Authorization"
); );
done(); done();
}); });