From 7a50fcebe62581614f6e5441f11adbc314d465ac Mon Sep 17 00:00:00 2001
From: Bernhard Posselt <nukeawhale@gmail.com>
Date: Mon, 2 Sep 2013 14:09:33 +0200
Subject: trying to fix cors

---
 middleware/corsmiddleware.php | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'middleware')

diff --git a/middleware/corsmiddleware.php b/middleware/corsmiddleware.php
index 8e4c5b4a0..ef9fe2e5a 100644
--- a/middleware/corsmiddleware.php
+++ b/middleware/corsmiddleware.php
@@ -24,12 +24,20 @@
 
 namespace OCA\News\Middleware;
 
+use OCA\AppFramework\Http\Request;
 use OCA\AppFramework\Http\Response;
 use OCA\AppFramework\Middleware\Middleware;
 use OCA\AppFramework\Utility\MethodAnnotationReader;
 
+
 class CORSMiddleware extends Middleware {
 
+	private $request;
+
+	public function __construct(Request $request) {
+		$this->request = $request;
+	}
+
 
 	/**
 	 * This is being run after a successful controllermethod call and allows
@@ -44,7 +52,7 @@ class CORSMiddleware extends Middleware {
 	public function afterController($controller, $methodName, Response $response){
 		$annotationReader = new MethodAnnotationReader($controller, $methodName);
 		if($annotationReader->hasAnnotation('API')) {
-			$response->addHeader('Access-Control-Allow-Origin', '*');
+			$response->addHeader('Access-Control-Allow-Origin', $request->server['Origin']);
 			$response->addHeader('Access-Control-Allow-Credentials', 'true');
 		}
 		return $response;
-- 
cgit v1.2.3