Allow CORS requests

stoneLeaf · Jan 11, 2019 · 7b29741 · 7b29741
1 parent 02b2a55
commit 7b29741
Show file tree

Hide file tree

Showing 4 changed files with 25 additions and 3 deletions.
diff --git a/app.js b/app.js
@@ -1,8 +1,12 @@
 const express = require('express')
 const logger = require('./config/winston')
+const cors = require('cors')
 
 const app = express()
 
+// Allowing cross origin resource sharing (CORS)
+app.use(cors())
+
 // Logging HTTP requests with Morgan
 app.use(require('morgan')('dev', { stream: logger.stream }))
 

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -20,6 +20,7 @@
   "homepage": "https://github.com/stoneLeaf/timeflies-backend#readme",
   "dependencies": {
     "bcrypt": "^3.0.2",
+    "cors": "^2.8.5",
     "express": "^4.16.4",
     "jsonwebtoken": "^8.4.0",
     "mongoose": "^5.3.14",

diff --git a/test/api/v1/auth_spec.js b/test/api/v1/auth_spec.js
@@ -39,6 +39,15 @@ describe('API v1 integration testing: authentication', function () {
       return resetDatabase()
     })
 
+    it('Should allow CORS', function () {
+      let params = factories.alphaLoginParams()
+      delete params.email
+      return requester.post(endpoint).send(params)
+        .then(function (res) {
+          expect(res).to.have.header('Access-Control-Allow-Origin', '*')
+        })
+    })
+
     it('Should require an email', function () {
       let params = factories.alphaLoginParams()
       delete params.email