Allow CORS

ruby-journal · Nov 28, 2015 · 4b1699f · 4b1699f
1 parent 009b59b
commit 4b1699f
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/apps/api_v1/controllers/institutions/index.rb b/apps/api_v1/controllers/institutions/index.rb
@@ -8,6 +8,9 @@ def initialize(repository: InstitutionRepository)
 
     def call(params)
       @institutions = @repository.all
+      self.headers['Access-Control-Allow-Origin'] = '*'
+      self.headers['Access-Control-Allow-Methods'] = 'GET,HEAD,PUT,PATCH,POST,DELETE'
+
       self.body = serialized_institutions
     end
 

diff --git a/spec/api_v1/controllers/institutions/index_spec.rb b/spec/api_v1/controllers/institutions/index_spec.rb
@@ -34,4 +34,11 @@
     expect(response[0]).to eq(406)
     expect(response[2]).to eq(["Not Acceptable"])
   end
+
+  it "allow CORS" do
+    response = action.call({})
+
+    expect(response[1]['Access-Control-Allow-Origin']).to eq('*')
+    expect(response[1]['Access-Control-Allow-Methods']).to eq('GET,HEAD,PUT,PATCH,POST,DELETE')
+  end
 end