add cross-site header

tuna · May 13, 2016 · a8fca70 · a8fca70
1 parent b91155d
commit a8fca70
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/gdanmaku/api.py b/gdanmaku/api.py
@@ -12,7 +12,9 @@ def jsonResponse(r):
     res.headers.add('Access-Control-Allow-Origin', '*')
     res.headers.add(
         'Access-Control-Allow-Headers',
-        'Content-Type,X-GDANMAKU-AUTH-KEY,X-GDANMAKU-SUBSCRIBER-ID')
+        'Content-Type,X-GDANMAKU-AUTH-KEY,'
+        'X-GDANMAKU-SUBSCRIBER-ID,X-GDANMAKU-TOKEN'
+    )
     res.headers.add('Access-Control-Allow-Methods', 'GET,POST,OPTIONS')
     return res