From: Tom Hughes <tom@compton.nu>
Date: Tue, 6 Jul 2021 18:30:05 +0000 (+0100)
Subject: Allow cross origin access to OAuth 2 token endpoints
X-Git-Tag: live~2356
X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/ba8093f13a5ff0a380971c511a70ee3e2f44e14a

Allow cross origin access to OAuth 2 token endpoints
---

diff --git a/config/initializers/cors.rb b/config/initializers/cors.rb
index 2ff479c6a..7421bd334 100644
--- a/config/initializers/cors.rb
+++ b/config/initializers/cors.rb
@@ -22,6 +22,9 @@ Rails.application.config.middleware.insert_before 0, OpenStreetMap::Cors do
   allow do
     origins "*"
     resource "/oauth/*", :headers => :any, :methods => [:get, :post]
+    resource "/oauth2/token", :headers => :any, :methods => [:post]
+    resource "/oauth2/revoke", :headers => :any, :methods => [:post]
+    resource "/oauth2/introspect", :headers => :any, :methods => [:post]
     resource "/api/*", :headers => :any, :methods => [:get, :post, :put, :delete]
     resource "/diary/rss", :headers => :any, :methods => [:get]
     resource "/diary/*/rss", :headers => :any, :methods => [:get]