From 2f30ce79c8f920f161b578b1fb933a74019519d8 Mon Sep 17 00:00:00 2001 From: Vikhyat Korrapati Date: Tue, 29 Jul 2014 22:11:59 +0530 Subject: [PATCH] Add Access-Control-Allow-Credentials to the CORS headers. --- config/initializers/08-rack-cors.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/config/initializers/08-rack-cors.rb b/config/initializers/08-rack-cors.rb index 5ad5c4ac546..e37038193b6 100644 --- a/config/initializers/08-rack-cors.rb +++ b/config/initializers/08-rack-cors.rb @@ -15,6 +15,7 @@ if GlobalSetting.enable_cors && GlobalSetting.cors_origin.present? end headers['Access-Control-Allow-Origin'] = origin || @origins[0] + headers['Access-Control-Allow-Credentials'] = "true" [status,headers,body] end end