Merge pull request monero-project#2830

f5461a6 RPC: CORS add Access-Control-Allow-Headers to OPTIONS preflight (Tim L)
0xneox · Dec 2, 2017 · 0d7162d · 0d7162d
2 parents 0bf4d6d + f5461a6
commit 0d7162d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/contrib/epee/include/net/http_protocol_handler.inl b/contrib/epee/include/net/http_protocol_handler.inl
@@ -639,6 +639,9 @@ namespace net_utils
 				buf += "Access-Control-Allow-Origin: ";
 				buf += m_query_info.m_header_info.m_origin;
 				buf += "\r\n";
+				buf += "Access-Control-Expose-Headers: www-authenticate\r\n";
+				if (m_query_info.m_http_method == http::http_method_options)
+					buf += "Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With\r\n";
 				buf += "Access-Control-Allow-Methods: POST, PUT, GET, OPTIONS\r\n";
 			}
 		}