From 234e471289e7556b0a9f70a01ceefc5814396f9f Mon Sep 17 00:00:00 2001
From: William Pitcock <nenolod@dereferenced.org>
Date: Sun, 11 Nov 2018 05:40:55 +0000
Subject: [PATCH] config: properly configure CORSPlug.

---
 config/config.exs | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/config/config.exs b/config/config.exs
index a6be69620..e82c490e3 100644
--- a/config/config.exs
+++ b/config/config.exs
@@ -176,6 +176,20 @@ config :pleroma, :suggestions,
   limit: 23,
   web: "https://vinayaka.distsn.org/?{{host}}+{{user}}"
 
+config :cors_plug,
+  max_age: 86_400,
+  methods: ["POST", "PUT", "DELETE", "GET", "PATCH", "OPTIONS"],
+  expose: [
+    "Link",
+    "X-RateLimit-Reset",
+    "X-RateLimit-Limit",
+    "X-RateLimit-Remaining",
+    "X-Request-Id",
+    "Idempotency-Key"
+  ],
+  credentials: true,
+  headers: ["Authorization", "Content-Type", "Idempotency-Key"]
+
 # Import environment specific config. This must remain at the bottom
 # of this file so it overrides the configuration defined above.
 import_config "#{Mix.env()}.exs"