From be03f6adb6e2cf7ea88388f1b6f19dd301a030d4 Mon Sep 17 00:00:00 2001 From: Andrew Rodgers Date: Fri, 20 Jun 2014 02:42:18 +0000 Subject: [PATCH] updated nginx conf examples for graphite CORS configuration --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f5ee64affe4..70f23a624ed 100644 --- a/README.md +++ b/README.md @@ -99,8 +99,8 @@ if ($http_origin ~* (https?://[^/]*\.somedomain\.com(:[0-9]+)?)) { #Test if req set $cors "true"; #statements to allow multiple domains, simply setting $cors to true in each one. } if ($cors = 'true') { - add_header Access-Control-Allow-Origin $http_origin; - add_header "Access-Control-Allow-Credentials" "true"; + add_header Access-Control-Allow-Origin $http_origin; #this mirrors back whatever domain the request came from as authorized, as + add_header "Access-Control-Allow-Credentials" "true"; #as long as it matches one of your if statements add_header "Access-Control-Allow-Methods" "GET, OPTIONS"; add_header "Access-Control-Allow-Headers" "Authorization, origin, accept"; }