From 3948d20f4678d4f09aaa00056a0de80dbdb39ea1 Mon Sep 17 00:00:00 2001
From: Stefan Zermatten <stefanzermatten@gmail.com>
Date: Thu, 10 Feb 2022 10:37:23 +0200
Subject: [PATCH] Allowed cross origin requests to REST API

---
 app/imports/server/config/SimpleRestConfig.js | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/app/imports/server/config/SimpleRestConfig.js b/app/imports/server/config/SimpleRestConfig.js
index a4d746cf..c633c6a2 100644
--- a/app/imports/server/config/SimpleRestConfig.js
+++ b/app/imports/server/config/SimpleRestConfig.js
@@ -1,5 +1,18 @@
+import { JsonRoutes } from 'meteor/simple:json-routes';
 import { SimpleRest } from 'meteor/simple:rest';
 
+Meteor.startup(() => {
+  //
+  // Enable cross origin requests for all endpoints
+  JsonRoutes.setResponseHeaders({
+    'Cache-Control': 'no-store',
+    Pragma: 'no-cache',
+    'Access-Control-Allow-Origin': '*',
+    'Access-Control-Allow-Methods': 'GET, PUT, POST, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': 'Content-Type, Authorization, X-Requested-With',
+  });
+});
+
 SimpleRest.configure({
   // No default collection methods get end points
   collections: [],