Merge pull request #96 from cfpb/ghp-cors

Allow API requests from CFPB Github Pages
cfpb · Oct 4, 2019 · d59d74b · d59d74b
2 parents e57b7fe + 0e6ab47
commit d59d74b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/complaint_search/views.py b/complaint_search/views.py
@@ -89,8 +89,12 @@ def _parse_query_params(query_params, validVars=None):
 # Header methods
 
 def _buildHeaders():
+    # API Documentation hosted on Github pages needs GET access
+    headers = {
+        'Access-Control-Allow-Origin': 'https://cfpb.github.io',
+        'Access-Control-Allow-Methods': 'GET'
+    }
     # Local development requires CORS support
-    headers = {}
     if settings.DEBUG:
         headers = {
             'Access-Control-Allow-Origin': '*',