Skip to content

Instantly share code, notes, and snippets.

@dhoelzgen
Last active October 7, 2021 16:19
Show Gist options
  • Save dhoelzgen/cd7126b8652229d32eb4 to your computer and use it in GitHub Desktop.
Save dhoelzgen/cd7126b8652229d32eb4 to your computer and use it in GitHub Desktop.
CORS in Rails 4 APIs
class API::V1::BaseController < ApplicationController
skip_before_filter :verify_authenticity_token
before_filter :cors_preflight_check
after_filter :cors_set_access_control_headers
def cors_set_access_control_headers
headers['Access-Control-Allow-Origin'] = '*'
headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, DELETE, OPTIONS'
headers['Access-Control-Allow-Headers'] = 'Origin, Content-Type, Accept, Authorization, Token'
headers['Access-Control-Max-Age'] = "1728000"
end
def cors_preflight_check
if request.method == 'OPTIONS'
headers['Access-Control-Allow-Origin'] = '*'
headers['Access-Control-Allow-Methods'] = 'POST, GET, PUT, DELETE, OPTIONS'
headers['Access-Control-Allow-Headers'] = 'X-Requested-With, X-Prototype-Version, Token'
headers['Access-Control-Max-Age'] = '1728000'
render :text => '', :content_type => 'text/plain'
end
end
end
Rails.application.routes.draw do
namespace :api, :defaults => {:format => :json} do
namespace :v1 do
controller :whatever, path: '/whatever' do
match 'post_action', via: [ :post, :options]
end
end
end
end
class API::V1::WhateverController < API::V1::BaseController
def upload
# Do complicated super secret stuff
render json: { success: true }
end
end
@MartinKei
Copy link

@npetkov - thank you very much!

@nshoes
Copy link

nshoes commented Jul 20, 2016

@npetkov - 👍

@davidcotter
Copy link

@npetkov - thanks! For the first part I added this to routes and it got everything working:

 Rails.application.routes.draw do
   ...
   match '*path', via: [:options], to:  lambda {|_| [204, {'Access-Control-Allow-Headers' => "Origin, Content-Type, Accept, Authorization, Token", 'Access-Control-Allow-Origin' => "*", 'Content-Type' => 'text/plain'}, []]}
end

That solved the problem. What is the second part for

@cesc1989
Copy link

cesc1989 commented Dec 6, 2016

Thanks a lot @npetkov

And thank you @davidcotter too

@aymericbouzy
Copy link

I opened an issue for that rails/rails#27655

@wellington1993
Copy link

Thanks

@jarrettgreen
Copy link

I get a Rack lint error when trying to pass any headers with a 204.

@jpmagido
Copy link

Nice, you made my day ^^

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment