Don't authorize OPTIONS requests, allow Origin request header
This commit is contained in:
parent
46c230d0d7
commit
24c5442c78
@ -30,12 +30,12 @@ class LiquorCabinet < Sinatra::Base
|
|||||||
before "/:user/:category/:key" do
|
before "/:user/:category/:key" do
|
||||||
headers 'Access-Control-Allow-Origin' => '*',
|
headers 'Access-Control-Allow-Origin' => '*',
|
||||||
'Access-Control-Allow-Methods' => 'GET, PUT, DELETE',
|
'Access-Control-Allow-Methods' => 'GET, PUT, DELETE',
|
||||||
'Access-Control-Allow-Headers' => 'Authorization, Content-Type'
|
'Access-Control-Allow-Headers' => 'Authorization, Content-Type, Origin'
|
||||||
|
|
||||||
@user, @category, @key = params[:user], params[:category], params[:key]
|
@user, @category, @key = params[:user], params[:category], params[:key]
|
||||||
token = env["HTTP_AUTHORIZATION"] ? env["HTTP_AUTHORIZATION"].split(" ")[1] : ""
|
token = env["HTTP_AUTHORIZATION"] ? env["HTTP_AUTHORIZATION"].split(" ")[1] : ""
|
||||||
|
|
||||||
authorize_request(@user, @category, token)
|
authorize_request(@user, @category, token) unless request.options?
|
||||||
end
|
end
|
||||||
|
|
||||||
get "/ohai" do
|
get "/ohai" do
|
||||||
|
Loading…
x
Reference in New Issue
Block a user