Fixed allow credentials missing

index from cors middleware

Change-Id: I82eb1d3292f22197bf5c7e7f717b2eb554a1afdc
This commit is contained in:
Sebastian Marcet 2017-05-08 12:05:24 -03:00
parent 99c09af7e4
commit 3fc02b33fa

View File

@ -236,7 +236,7 @@ class CORSMiddleware
// ----Step 2a: Check if the current request has an entry into the preflighted requests Cache
$data = $this->cache_service->getHash($cache_id, CORSRequestPreflightData::$cache_attributes);
$this->headers['Access-Control-Allow-Origin'] = $request->headers->get('Origin');
if ((bool)$data['allows_credentials'])
if (isset($data['allows_credentials']) && $data['allows_credentials'] == true)
{
$this->headers['Access-Control-Allow-Credentials'] = 'true';
}