Allow Access-Control-Allow-Credentials in Access-Control-Allow-Origin

(cherry picked from commit e51453fd3b20c01ed6b77b2c4396ec4254fbd403)

Allow Access-Control-Allow-Credentials in Access-Control-Allow-Origin
(cherry picked from commit e51453fd3b20c01ed6b77b2c4396ec4254fbd403)
Braulio Bhavamitra · Antonio Terceiro
1 parent dbaf4701
Showing 1 changed file with 1 additions and 0 deletions Show diff stats
app/controllers/application_controller.rb
@@ -28,6 +28,7 @@ class ApplicationController &lt; ActionController::Base
       unless environment.access_control_allow_methods.blank?
         response.headers["Access-Control-Allow-Methods"] = environment.access_control_allow_methods
       end
+      response.headers["Access-Control-Allow-Credentials"] = 'true'
     elsif environment.restrict_to_access_control_origins
       render_access_denied _('Origin not in allowed.')
     end
...	...	@@ -28,6 +28,7 @@ class ApplicationController < ActionController::Base
28	28	unless environment.access_control_allow_methods.blank?
29	29	response.headers["Access-Control-Allow-Methods"] = environment.access_control_allow_methods
30	30	end
	31	+ response.headers["Access-Control-Allow-Credentials"] = 'true'
31	32	elsif environment.restrict_to_access_control_origins
32	33	render_access_denied _('Origin not in allowed.')
33	34	end
...	...