Merge pull request #2604 from vikhyat/fix-cors

Add Access-Control-Allow-Credentials
2014-07-30 14:07:27 +10:00 · 2014-07-30 14:07:27 +10:00 · 58e05cb083
parent 958e3faf94 2f30ce79c8
commit 58e05cb083
1 changed files with 1 additions and 0 deletions
--- a/config/initializers/08-rack-cors.rb
+++ b/config/initializers/08-rack-cors.rb
@ -15,6 +15,7 @@ if GlobalSetting.enable_cors && GlobalSetting.cors_origin.present?
      end

      headers['Access-Control-Allow-Origin'] = origin || @origins[0]
+      headers['Access-Control-Allow-Credentials'] = "true"
      [status,headers,body]
    end
  end