Skip to content

Instantly share code, notes, and snippets.

@djpate

djpate/cors.config

Created August 28, 2016 15:55
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save djpate/40e50a649d3882652cdd7f7eb1664fdd to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save djpate/40e50a649d3882652cdd7f7eb1664fdd to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. djpate created this gist Aug 28, 2016.
    6 changes: 6 additions & 0 deletions cors.config
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,6 @@
    #This should be in ebextensions
    container_commands:
    01setup_cors:
    command: "ruby .ebextensions/cors.rb"
    02reload_nginx:
    command: "service nginx reload"
    40 changes: 40 additions & 0 deletions cors.rb
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,40 @@
    #!/usr/bin/env ruby
    #Adds cors to Assets

    CORS_config = """
    if ($request_method = 'OPTIONS') {
    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
    #
    # Custom headers and headers various browsers *should* be OK with but aren't
    #
    add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
    #
    # Tell client that this pre-flight info is valid for 20 days
    #
    add_header 'Access-Control-Max-Age' 1728000;
    add_header 'Content-Type' 'text/plain charset=UTF-8';
    add_header 'Content-Length' 0;
    return 204;
    }
    if ($request_method = 'POST') {
    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
    add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
    }
    if ($request_method = 'GET') {
    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
    add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
    }
    """

    conf_path = '/opt/elasticbeanstalk/support/conf/webapp_healthd.conf'

    nginx_config = File.read(conf_path)

    # if its alredy there we don't do anything
    unless nginx_config.include?(CORS_config)
    nginx_config.gsub!('location /assets {', "location /assets {\n#{CORS_config}")
    File.write(conf_path, nginx_config)
    end