Windshaft-cartodb/lib/api/middlewares/cors.js
2020-02-13 12:52:20 +01:00

25 lines
615 B
JavaScript

'use strict';
module.exports = function cors () {
return function corsMiddleware (req, res, next) {
const headers = [
'X-Requested-With',
'X-Prototype-Version',
'X-CSRF-Token',
'Authorization',
'Carto-Source-Lib',
'Carto-Source-Context',
'Carto-Source-Context-Id'
];
if (req.method === 'OPTIONS') {
headers.push('Content-Type');
}
res.set('Access-Control-Allow-Origin', '*');
res.set('Access-Control-Allow-Headers', headers.join(', '));
next();
};
};