9ae60f8738
Conflicts: - `db/migrate/20180831171112_create_bookmarks.rb`: Upstream ran a lint fix on this file, but this file is different in glitch-soc because the feature was added much earlier. Ran the lint fix on our own version of the file.
41 lines
1.3 KiB
Ruby
41 lines
1.3 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# Be sure to restart your server when you modify this file.
|
|
|
|
# Avoid CORS issues when API is called from the frontend app.
|
|
# Handle Cross-Origin Resource Sharing (CORS) in order to accept cross-origin AJAX requests.
|
|
|
|
# Read more: https://github.com/cyu/rack-cors
|
|
|
|
Rails.application.config.middleware.insert_before 0, Rack::Cors do
|
|
allow do
|
|
origins '*'
|
|
|
|
resource '/.well-known/*',
|
|
headers: :any,
|
|
methods: [:get],
|
|
credentials: false
|
|
resource '/@:username',
|
|
headers: :any,
|
|
methods: [:get],
|
|
credentials: false
|
|
resource '/users/:username',
|
|
headers: :any,
|
|
methods: [:get],
|
|
credentials: false
|
|
resource '/api/*',
|
|
headers: :any,
|
|
methods: [:post, :put, :delete, :get, :patch, :options],
|
|
credentials: false,
|
|
expose: ['Link', 'X-RateLimit-Reset', 'X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-Request-Id']
|
|
resource '/oauth/token',
|
|
headers: :any,
|
|
methods: [:post],
|
|
credentials: false
|
|
resource '/assets/*', headers: :any, methods: [:get, :head, :options]
|
|
resource '/stylesheets/*', headers: :any, methods: [:get, :head, :options]
|
|
resource '/javascripts/*', headers: :any, methods: [:get, :head, :options]
|
|
resource '/packs/*', headers: :any, methods: [:get, :head, :options]
|
|
end
|
|
end
|