add cors headers

2024-02-20 18:24:57 +02:00
parent 250889623d
commit aa3bd24332
2 changed files with 10 additions and 0 deletions
@@ -59,5 +59,13 @@ module Api
    def current_account
      current_user&.account
    end
+
+    def set_cors_headers
+      headers['Access-Control-Allow-Origin'] = '*'
+      headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, PATCH, DELETE, OPTIONS'
+      headers['Access-Control-Allow-Headers'] = '*'
+      headers['Access-Control-Max-Age'] = '1728000'
+      headers['Access-Control-Allow-Credentials'] = true
+    end
  end
 end