diff --git a/src/server/index.coffee b/src/server/index.coffee index 41b447f677..f4c005ebeb 100644 --- a/src/server/index.coffee +++ b/src/server/index.coffee @@ -74,11 +74,11 @@ mongo_store = new MongoStore {url: process.env.NODE_DB_URI}, -> ) # Adds req.getModel method .use(store.modelMiddleware()) + .use(middleware.allowCrossDomain) # API should be hit before all other routes .use('/api/v1', require('./api').middleware) .use(require('./deprecated').middleware) # Show splash page for newcomers - .use(middleware.splash) .use(priv.middleware) .use(middleware.view) .use(auth.middleware(strategies, options)) diff --git a/src/server/middleware.coffee b/src/server/middleware.coffee index 9ad133788d..191ccc8f40 100644 --- a/src/server/middleware.coffee +++ b/src/server/middleware.coffee @@ -12,3 +12,10 @@ module.exports.view = (req, res, next) -> _view.nodeEnv = process.env.NODE_ENV model.set '_view', _view next() + +#CORS middleware +module.exports.allowCrossDomain = (req, res, next) -> + res.header "Access-Control-Allow-Origin", '*' + res.header "Access-Control-Allow-Methods", "GET,PUT,POST,DELETE" + res.header "Access-Control-Allow-Headers", "Content-Type" + next() \ No newline at end of file