Allow cross origin access to OAuth 2 token endpoints

openstreetmap · Jul 6, 2021 · ba8093f · ba8093f
1 parent 9db8488
commit ba8093f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/config/initializers/cors.rb b/config/initializers/cors.rb
@@ -22,6 +22,9 @@ def call(env)
   allow do
     origins "*"
     resource "/oauth/*", :headers => :any, :methods => [:get, :post]
+    resource "/oauth2/token", :headers => :any, :methods => [:post]
+    resource "/oauth2/revoke", :headers => :any, :methods => [:post]
+    resource "/oauth2/introspect", :headers => :any, :methods => [:post]
     resource "/api/*", :headers => :any, :methods => [:get, :post, :put, :delete]
     resource "/diary/rss", :headers => :any, :methods => [:get]
     resource "/diary/*/rss", :headers => :any, :methods => [:get]