Cors header should always be returned (#2140)

This commit is contained in:
Manuel Alejandro de Brito Fontes 2018-02-24 17:52:23 -03:00 committed by GitHub
parent 6953ddb8e6
commit 94a85c99f7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -552,20 +552,20 @@ stream {
{{ $cors := .CorsConfig }} {{ $cors := .CorsConfig }}
# Cors Preflight methods needs additional options and different Return Code # Cors Preflight methods needs additional options and different Return Code
if ($request_method = 'OPTIONS') { if ($request_method = 'OPTIONS') {
add_header 'Access-Control-Allow-Origin' '{{ $cors.CorsAllowOrigin }}' always; more_set_headers 'Access-Control-Allow-Origin: {{ $cors.CorsAllowOrigin }}';
{{ if $cors.CorsAllowCredentials }} add_header 'Access-Control-Allow-Credentials' '{{ $cors.CorsAllowCredentials }}' always; {{ end }} {{ if $cors.CorsAllowCredentials }} more_set_headers 'Access-Control-Allow-Credentials: {{ $cors.CorsAllowCredentials }}'; {{ end }}
add_header 'Access-Control-Allow-Methods' '{{ $cors.CorsAllowMethods }}' always; more_set_headers 'Access-Control-Allow-Methods: {{ $cors.CorsAllowMethods }}';
add_header 'Access-Control-Allow-Headers' '{{ $cors.CorsAllowHeaders }}' always; more_set_headers 'Access-Control-Allow-Headers: {{ $cors.CorsAllowHeaders }}';
add_header 'Access-Control-Max-Age' {{ $cors.CorsMaxAge }}; more_set_headers 'Access-Control-Max-Age: {{ $cors.CorsMaxAge }}';
add_header 'Content-Type' 'text/plain charset=UTF-8'; more_set_headers 'Content-Type: text/plain charset=UTF-8';
add_header 'Content-Length' 0; more_set_headers 'Content-Length: 0';
return 204; return 204;
} }
add_header 'Access-Control-Allow-Origin' '{{ $cors.CorsAllowOrigin }}' always; more_set_headers 'Access-Control-Allow-Origin: {{ $cors.CorsAllowOrigin }}';
{{ if $cors.CorsAllowCredentials }} add_header 'Access-Control-Allow-Credentials' '{{ $cors.CorsAllowCredentials }}' always; {{ end }} {{ if $cors.CorsAllowCredentials }} more_set_headers 'Access-Control-Allow-Credentials: {{ $cors.CorsAllowCredentials }}'; {{ end }}
add_header 'Access-Control-Allow-Methods' '{{ $cors.CorsAllowMethods }}' always; more_set_headers 'Access-Control-Allow-Methods: {{ $cors.CorsAllowMethods }}';
add_header 'Access-Control-Allow-Headers' '{{ $cors.CorsAllowHeaders }}' always; more_set_headers 'Access-Control-Allow-Headers: {{ $cors.CorsAllowHeaders }}';
{{ end }} {{ end }}