pelias/api - api - CogtoSrc

Author	SHA1	Message	Date
Julian Simioni	204f5297de	Remove all leading newlines in files	7 years ago
Julian Simioni	a233e11d59	Remove Access-Control-Allow-Credentials header This header is only relevant if dealing with authentication via cookies or other methods in HTTP requests. The Pelias API intentionally doesn't deal with authentication at all, assuming anyone who wants authentication will deal with it using a service placed between Pelias and end users. Additionally the CORS spec [does not allow](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Credentialed_requests_and_wildcards) specifying this header while setting a wildcard for `Access-Control-Allow-Origin`, so it can cause problems in some cases. Fixes https://github.com/pelias/api/issues/971	7 years ago
Peter Johnson	3408e2caa5	fix CORS support by enabling OPTIONS endpoint	9 years ago
Peter Johnson	972d3a2a84	refactor	10 years ago