Class: LtiPublicResources::ApplicationController

Inherits:
ActionController::Base
  • Object
show all
Defined in:
app/controllers/lti_public_resources/application_controller.rb

Direct Known Subclasses

ApiController, EmberController, TestController

Instance Method Summary collapse

Instance Method Details

#cors_preflight_check ⇒ Object

If this is a preflight OPTIONS request, then short-circuit the request, return only the necessary headers and return an empty text/plain.



18
19
20
21
22
23
24
25
26
 
# File 'app/controllers/lti_public_resources/application_controller.rb', line 18

def cors_preflight_check
  if request.method == :options
    headers['Access-Control-Allow-Origin'] = '*'
    headers['Access-Control-Allow-Methods'] = 'POST, GET, OPTIONS'
    headers['Access-Control-Allow-Headers'] = '*'
    headers['Access-Control-Max-Age'] = '1728000'
    render :text => '', :content_type => 'text/plain'
  end
end

#cors_set_access_control_headers ⇒ Object

For all responses in this controller, return the CORS access control headers.



7
8
9
10
11
12
13
 
# File 'app/controllers/lti_public_resources/application_controller.rb', line 7

def cors_set_access_control_headers
  headers['Access-Control-Allow-Origin'] = '*'
  headers['Access-Control-Allow-Methods'] = 'POST, PUT, DELETE, GET, OPTIONS'
  headers['Access-Control-Request-Method'] = '*'
  headers['Access-Control-Allow-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Authorization'
  headers['Access-Control-Max-Age'] = "1728000"
end