search

mozilla / teach-api

A basic API to store data for learning.mozilla.org
2 stars 11 forks source link

make sure credentials get passed for write operations #54

Closed Pomax closed 8 years ago

Pomax commented 8 years ago

This adds the CORS var that tells Django to allow withCredentials() and CSRF tokens when hitting a route with an HTTP write verb (POST/PUT/DELETE/etc)

gideonthomas commented 8 years ago

@Pomax looks like tests are failing

Pomax commented 8 years ago

yeah the old test needed an update (anything hitting /api/... gets CORS cleared specifically on its own domain, not on *)

gideonthomas commented 8 years ago

lgtm r+