Allow cross origin access to OAuth 2 token endpoints

This commit is contained in:
Tom Hughes 2021-07-06 19:30:05 +01:00
parent 9db8488e7f
commit ba8093f13a

View file

@ -22,6 +22,9 @@ Rails.application.config.middleware.insert_before 0, OpenStreetMap::Cors do
allow do allow do
origins "*" origins "*"
resource "/oauth/*", :headers => :any, :methods => [:get, :post] resource "/oauth/*", :headers => :any, :methods => [:get, :post]
resource "/oauth2/token", :headers => :any, :methods => [:post]
resource "/oauth2/revoke", :headers => :any, :methods => [:post]
resource "/oauth2/introspect", :headers => :any, :methods => [:post]
resource "/api/*", :headers => :any, :methods => [:get, :post, :put, :delete] resource "/api/*", :headers => :any, :methods => [:get, :post, :put, :delete]
resource "/diary/rss", :headers => :any, :methods => [:get] resource "/diary/rss", :headers => :any, :methods => [:get]
resource "/diary/*/rss", :headers => :any, :methods => [:get] resource "/diary/*/rss", :headers => :any, :methods => [:get]