Contents

module CgAppBase
  module CrossDomainConcern
    extend ActiveSupport::Concern

    def cors_check
      if request and request.env["HTTP_ORIGIN"]

        origin = request.env["HTTP_ORIGIN"]
        allowed = ENV['ALLOWED_CORS']

        if origin and allowed and allowed.include?(origin)

          headers['Access-Control-Allow-Origin'] = origin
          headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, DELETE, OPTIONS'
          headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-Prototype-Version, Token'
          headers['Access-Control-Max-Age'] = '60'

        end

      end
    end

  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
cg_app_base-1.1.1	app/controllers/concerns/cg_app_base/cross_domain_concern.rb
cg_app_base-1.0.78	app/controllers/concerns/cg_app_base/cross_domain_concern.rb