class Api::V0::ApiController < ApplicationController def cors_set_access_control_headers headers["Access-Control-Allow-Origin"] = "*" headers["Access-Control-Allow-Methods"] = "POST, GET, PUT, DELETE, OPTIONS" headers["Access-Control-Allow-Headers"] = "Origin, Content-Type, Accept, Authorization, Token" headers["Access-Control-Max-Age"] = "1728000" end def cors_preflight_check return unless request.method == "OPTIONS" headers["Access-Control-Allow-Origin"] = "*" headers["Access-Control-Allow-Methods"] = "POST, GET, PUT, DELETE, OPTIONS" headers["Access-Control-Allow-Headers"] = "X-Requested-With, X-Prototype-Version, Token" headers["Access-Control-Max-Age"] = "1728000" render text: "", content_type: "text/plain" end end