pelias/api - api - CogtoSrc

2597 Commits

67 Branches

133 Tags

4.7 MiB

Branch: dedupe_improved_parent_matching

Commit Graph

Author	SHA1	Message	Date
Julian Simioni	a233e11d59	Remove Access-Control-Allow-Credentials header This header is only relevant if dealing with authentication via cookies or other methods in HTTP requests. The Pelias API intentionally doesn't deal with authentication at all, assuming anyone who wants authentication will deal with it using a service placed between Pelias and end users. Additionally the CORS spec [does not allow](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Credentialed_requests_and_wildcards) specifying this header while setting a wildcard for `Access-Control-Allow-Origin`, so it can cause problems in some cases. Fixes https://github.com/pelias/api/issues/971	7 years ago
Peter Johnson	719b32b304	fix ciao tests	9 years ago

Author

SHA1

Message

Date

Julian Simioni

a233e11d59

Remove Access-Control-Allow-Credentials header

This header is only relevant if dealing with authentication via cookies
or other methods in HTTP requests. The Pelias API intentionally doesn't
deal with authentication at all, assuming anyone who wants
authentication will deal with it using a service placed between Pelias
and end users.

Additionally the CORS spec [does not allow](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Credentialed_requests_and_wildcards)
specifying this header while setting a wildcard for
`Access-Control-Allow-Origin`, so it can cause problems in some cases.

Fixes https://github.com/pelias/api/issues/971

7 years ago

Peter Johnson

719b32b304

fix ciao tests

9 years ago

2 Commits (dedupe_improved_parent_matching)