expose authorization header

itsazzad · Sep 16, 2020 · 213eed5 · 213eed5
1 parent 44e00fd
commit 213eed5
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/config/initializers/cors.rb b/config/initializers/cors.rb
@@ -11,9 +11,10 @@
   allow do
     origins ENV['CLIENT_URL'] ? ENV['CLIENT_URL'].split(',').map(&:strip) : '0.0.0.0:8000'
 
+    # origins '*'
     resource '*',
-             headers: :any,
-             methods: %i[get post put patch delete options head],
-             credentials: true
+      :headers => :any,
+      :expose  => ['Authorization'],
+      :methods => [:get, :post, :options, :delete, :put]
   end
 end