Class: Tina4::CorsClassMiddleware

Inherits:
Object
  • Object
show all
Defined in:
lib/tina4/middleware.rb

Overview

CorsClassMiddleware – sets CORS headers from env vars on every response. Uses the same config source as CorsMiddleware module.

Class Method Summary collapse

Class Method Details

.before_cors(request, response) ⇒ Object 



132
133
134
135
136
137
138
139
140
141
142
143
144
145
 
# File 'lib/tina4/middleware.rb', line 132

def before_cors(request, response)
  config = load_config
  origin = resolve_origin(request, config)

  response.headers["access-control-allow-origin"]  = origin
  response.headers["access-control-allow-methods"] = config[:methods]
  response.headers["access-control-allow-headers"] = config[:headers]
  response.headers["access-control-max-age"]       = config[:max_age]
  if config[:credentials] == "true"
    response.headers["access-control-allow-credentials"] = "true"
  end

  [request, response]
end