cors headers work in progress

Author: MichalCz

bin/http-server

@@ -105,6 +105,10 @@ function listen(port) {
     options.cors = true;
   }
 
+  if (argv.corsheaders) {
+    options.cors_headers = argv.corsheaders;
+  }
+
   if (ssl) {
     options.https = {
       cert: argv.C || argv.cert || 'cert.pem',

lib/http-server.js

@@ -67,8 +67,13 @@ function HttpServer(options) {
   if (options.cors) {
     this.headers['Access-Control-Allow-Origin'] = '*';
     this.headers['Access-Control-Allow-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Range';
-
-    before.push(corser.create());
+    if (options.cors_headers) {
+      options.cors_headers.split(/\s*,\s*/)
+          .forEach(function(h){ console.log(h); this.headers['Access-Control-Allow-Headers'] += ', ' + h; }, this);
+    }
+    before.push(corser.create(options.cors_headers ? {
+      requestHeaders: this.headers['Access-Control-Allow-Headers'].split(/\s*,\s*/)
+    } : null));
   }
 
   if (options.robots) {