set CORS headers (#99)

* Update application.rb

* Update Gemfile

* Only allow zeus.ugent.be cors

Gemfile

@@ -38,6 +38,9 @@ gem 'jbuilder', '~> 1.2'
 # Build google charts
 gem 'google_visualr'
 
+# CORS
+gem 'rack-cors', :require => 'rack/cors'
+
 group :doc do
   # bundle exec rake doc:rails generates the API under doc/api.
   gem 'sdoc', require: false

Gemfile.lock

@@ -194,6 +194,7 @@ GEM
       byebug (~> 4.0)
       pry (~> 0.10)
     rack (1.5.5)
+    rack-cors (0.4.0)
     rack-test (0.6.3)
       rack (>= 1.0)
     rails (4.1.8)
@@ -325,6 +326,7 @@ DEPENDENCIES
   omniauth
   omniauth-github
   pry-byebug
+  rack-cors
   rack-test
   rails (~> 4.1)
   rspec-rails

config/application.rb

@@ -63,6 +63,14 @@ class Application < Rails::Application
       g.fixture_replacement :factory_girl, dir: 'spec/factories'
     end
 
+    # CORS headers
+    config.middleware.insert_before 0, "Rack::Cors" do
+      allow do
+        origins /localhost(:\d+)?/, 'zeus.ugent.be'
+        resource '*', :headers => :any, :methods => [:get, :options]
+      end
+    end
+
     # Backport from Rails 4.2: custom configurations
     # Just remove this block when upgrading from 4.1.8 to 4.2
     if Rails.version == '4.1.8'