trying to fix cors

1 files changed, 9 insertions, 1 deletions

diff --git a/middleware/corsmiddleware.php b/middleware/corsmiddleware.php
index 8e4c5b4a0..ef9fe2e5a 100644
--- a/middleware/corsmiddleware.php
+++ b/middleware/corsmiddleware.php
@@ -24,12 +24,20 @@
 
 namespace OCA\News\Middleware;
 
+use OCA\AppFramework\Http\Request;
 use OCA\AppFramework\Http\Response;
 use OCA\AppFramework\Middleware\Middleware;
 use OCA\AppFramework\Utility\MethodAnnotationReader;
 
+
 class CORSMiddleware extends Middleware {
 
+	private $request;
+
+	public function __construct(Request $request) {
+		$this->request = $request;
+	}
+
 
 	/**
 	 * This is being run after a successful controllermethod call and allows
@@ -44,7 +52,7 @@ class CORSMiddleware extends Middleware {
 	public function afterController($controller, $methodName, Response $response){
 		$annotationReader = new MethodAnnotationReader($controller, $methodName);
 		if($annotationReader->hasAnnotation('API')) {
-			$response->addHeader('Access-Control-Allow-Origin', '*');
+			$response->addHeader('Access-Control-Allow-Origin', $request->server['Origin']);
 			$response->addHeader('Access-Control-Allow-Credentials', 'true');
 		}
 		return $response;