From a8fca70a938079aa838ec8c9d632d1f9f532cc7b Mon Sep 17 00:00:00 2001
From: bigeagle <justin.w.xd@gmail.com>
Date: Fri, 13 May 2016 14:45:07 +0800
Subject: [PATCH] add cross-site header

---
 gdanmaku/api.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/gdanmaku/api.py b/gdanmaku/api.py
index f1b2a9a..636f120 100644
--- a/gdanmaku/api.py
+++ b/gdanmaku/api.py
@@ -12,7 +12,9 @@ def jsonResponse(r):
     res.headers.add('Access-Control-Allow-Origin', '*')
     res.headers.add(
         'Access-Control-Allow-Headers',
-        'Content-Type,X-GDANMAKU-AUTH-KEY,X-GDANMAKU-SUBSCRIBER-ID')
+        'Content-Type,X-GDANMAKU-AUTH-KEY,'
+        'X-GDANMAKU-SUBSCRIBER-ID,X-GDANMAKU-TOKEN'
+    )
     res.headers.add('Access-Control-Allow-Methods', 'GET,POST,OPTIONS')
     return res