| 1 | 'use strict'
|
| 2 |
|
| 3 | module.exports = {
|
| 4 | custom: function (request, response) {
|
| 5 | const origin = request.headers.origin
|
| 6 | if (request.method === 'OPTIONS') {
|
| 7 | response.writeHead(200, {
|
| 8 | 'Access-Control-Allow-Origin': origin,
|
| 9 | Vary: 'Origin',
|
| 10 | 'Access-Control-Allow-Headers': 'content-type, content-length, x-page-url',
|
| 11 | 'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
|
| 12 | 'Access-Control-Allow-Credentials': 'true'
|
| 13 | })
|
| 14 | response.end()
|
| 15 | } else if (origin) {
|
| 16 | response.setHeader('Access-Control-Allow-Origin', origin)
|
| 17 | response.setHeader('Vary', 'Origin')
|
| 18 | response.setHeader('Access-Control-Allow-Credentials', 'true')
|
| 19 | }
|
| 20 | }
|
| 21 | }
|