27 lines
		
	
	
	
		
			881 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			27 lines
		
	
	
	
		
			881 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| # Be sure to restart your server when you modify this file.
 | |
| 
 | |
| # Avoid CORS issues when API is called from the frontend app.
 | |
| # Handle Cross-Origin Resource Sharing (CORS) in order to accept cross-origin Ajax requests.
 | |
| 
 | |
| # Read more: https://github.com/cyu/rack-cors
 | |
| 
 | |
| Rails.application.config.middleware.insert_before 0, Rack::Cors do
 | |
|   allow do
 | |
|     origins '*'
 | |
| 
 | |
|     with_options headers: :any, credentials: false do
 | |
|       with_options methods: [:get] do
 | |
|         resource '/.well-known/*'
 | |
|         resource '/nodeinfo/*'
 | |
|         resource '/@:username'
 | |
|         resource '/users/:username'
 | |
|       end
 | |
|       resource '/api/*',
 | |
|                expose: %w(Link X-RateLimit-Reset X-RateLimit-Limit X-RateLimit-Remaining X-Request-Id),
 | |
|                methods: %i(post put delete get patch options)
 | |
|       resource '/oauth/token', methods: [:post]
 | |
|     end
 | |
|   end
 | |
| end
 |