Don't authorize OPTIONS requests, allow Origin request header

This commit is contained in:
Basti 2012-02-29 18:44:49 +01:00
parent 46c230d0d7
commit 24c5442c78

View File

@ -30,12 +30,12 @@ class LiquorCabinet < Sinatra::Base
before "/:user/:category/:key" do before "/:user/:category/:key" do
headers 'Access-Control-Allow-Origin' => '*', headers 'Access-Control-Allow-Origin' => '*',
'Access-Control-Allow-Methods' => 'GET, PUT, DELETE', 'Access-Control-Allow-Methods' => 'GET, PUT, DELETE',
'Access-Control-Allow-Headers' => 'Authorization, Content-Type' 'Access-Control-Allow-Headers' => 'Authorization, Content-Type, Origin'
@user, @category, @key = params[:user], params[:category], params[:key] @user, @category, @key = params[:user], params[:category], params[:key]
token = env["HTTP_AUTHORIZATION"] ? env["HTTP_AUTHORIZATION"].split(" ")[1] : "" token = env["HTTP_AUTHORIZATION"] ? env["HTTP_AUTHORIZATION"].split(" ")[1] : ""
authorize_request(@user, @category, token) authorize_request(@user, @category, token) unless request.options?
end end
get "/ohai" do get "/ohai" do