5 commits

Author	SHA1	Message	Date
theworldbright	58aef5658b	Fix remaining remarks	2016-01-04 17:01:40 +09:00
augier	10314ffc8c	Fixing more remarks	2016-01-04 16:49:58 +09:00
theworldbright	21175e7eee	Allow POST requests for user info endpoint	2016-01-04 16:49:54 +09:00
theworldbright	28fc65ae26	Add CORS support to OIDC	2016-01-04 16:49:54 +09:00
Steven Hancock	f2922c943c	Cross-Origin Resource Sharing ... Remove partial support for CORS on webfinger routes and replace it with the Rack::Cors middleware. This provides more complete CORS support and works around a caching issue with nginx on Heroku and potentially other reverse proxies. CORS headers are only added if the incoming request includes an "Origin" header, which seems to be correct according to the CORS spec. closes #2216	2012-03-10 23:49:56 -08:00