Allow crossdomain AJAX requests to the API

thunderpush · Aug 24, 2012 · 751d4ad · 751d4ad
1 parent bb04910
commit 751d4ad
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/thunderpush/api.py b/thunderpush/api.py
@@ -58,6 +58,14 @@ def response(self, data, code=200):
     def error(self, message, code=500):
         self.response({"message": message}, code)
 
+    def prepare(self, *args, **kwargs):
+        self.set_header("Access-Control-Allow-Origin", "*")
+        self.set_header("Access-Control-Allow-Headers", "X-Thunder-Secret-Key")
+        self.set_header("Access-Control-Allow-Methods", "GET, POST, DELETE")
+
+    def options(self, *args, **kwargs):
+        pass
+
 
 class ChannelHandler(ThunderApiHandler):
     @is_authenticated