doitian

class MyAPI < Grape::API
  class CrossOriginResourceSharingPolicy < Grape::Middleware::Base
    def append_cors_headers(headers)
      headers['Access-Control-Allow-Origin'] = env['HTTP_ORIGIN'] || '*'
      headers['Access-Control-Allow-Credentials'] = 'true'
      headers['Access-Control-Max-Age'] = '180'
      if env['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']
        headers['Access-Control-Allow-Headers'] = env['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']
      end
      headers['Access-Control-Allow-Methods'] = 'GET, POST, PUT, DELETE, OPTIONS'