summaryrefslogtreecommitdiffhomepage
path: root/rails-backend/config/initializers/cors.rb
diff options
context:
space:
mode:
authorrealtradam <[email protected]>2024-06-27 12:41:26 -0400
committerrealtradam <[email protected]>2024-06-27 12:41:26 -0400
commitc8be5658bae95b94198dc00bd206ba324d9404e0 (patch)
tree24563828d9f04a4e52c9187cff3c028434fd886c /rails-backend/config/initializers/cors.rb
parent8ec0664fe7cf4a34bc5fc1f162c053622a42dd41 (diff)
downloadgameHolster-c8be5658bae95b94198dc00bd206ba324d9404e0.tar.gz
gameHolster-c8be5658bae95b94198dc00bd206ba324d9404e0.zip
add frontend to repo
Diffstat (limited to 'rails-backend/config/initializers/cors.rb')
-rw-r--r--rails-backend/config/initializers/cors.rb27
1 files changed, 27 insertions, 0 deletions
diff --git a/rails-backend/config/initializers/cors.rb b/rails-backend/config/initializers/cors.rb
new file mode 100644
index 0000000..541e2ed
--- /dev/null
+++ b/rails-backend/config/initializers/cors.rb
@@ -0,0 +1,27 @@
+# Be sure to restart your server when you modify this file.
+
+# Avoid CORS issues when API is called from the frontend app.
+# Handle Cross-Origin Resource Sharing (CORS) in order to accept cross-origin Ajax requests.
+
+# Read more: https://github.com/cyu/rack-cors
+
+# Rails.application.config.middleware.insert_before 0, Rack::Cors do
+# allow do
+# origins "example.com"
+#
+# resource "*",
+# headers: :any,
+# methods: [:get, :post, :put, :patch, :delete, :options, :head]
+# end
+# end
+
+ Rails.application.config.middleware.insert_before 0, Rack::Cors do
+ allow do
+ origins 'localhost:3000', 'localhost:5173', 'gameshoster.com', 'malcz.com'
+
+ resource '/api/v1/*',
+ headers: :any,
+ methods: [:get, :post, :put, :patch, :delete, :options, :head],
+ credentials: true # <- need this to enable auth
+ end
+ end