slate/common/middleware.js
2020-06-18 20:57:57 -07:00

18 lines
390 B
JavaScript

export const CORS = async (req, res, next) => {
res.header("Access-Control-Allow-Origin", "*");
res.header(
"Access-Control-Allow-Methods",
"GET, POST, PATCH, PUT, DELETE, OPTIONS"
);
res.header(
"Access-Control-Allow-Headers",
"Origin, Accept, Content-Type, Authorization"
);
if (req.method === "OPTIONS") {
return res.status(200).end();
}
next();
};