This is an automated email from the ASF dual-hosted git repository.

heneveld pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/brooklyn-server.git

commit e3b9cbf551e1eec58a6a45b63a54c709f89978eb
Author: frogfather <[email protected]>
AuthorDate: Fri Nov 30 08:21:01 2018 +0000

    add cors header to server response
---
 .../org/apache/brooklyn/rest/security/jaas/GoogleOauthLoginModule.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/rest/rest-resources/src/main/java/org/apache/brooklyn/rest/security/jaas/GoogleOauthLoginModule.java
 
b/rest/rest-resources/src/main/java/org/apache/brooklyn/rest/security/jaas/GoogleOauthLoginModule.java
index 2e497c6..bb3666b 100644
--- 
a/rest/rest-resources/src/main/java/org/apache/brooklyn/rest/security/jaas/GoogleOauthLoginModule.java
+++ 
b/rest/rest-resources/src/main/java/org/apache/brooklyn/rest/security/jaas/GoogleOauthLoginModule.java
@@ -318,7 +318,7 @@ public class GoogleOauthLoginModule implements LoginModule {
                 .append("&approval_prompt=force"); // this requires them to 
verify which account to use, if they are
         // already signed in
         logger.debug(oauthUrl.toString());
-        
response.addHeader("Access-Control-Allow-Origin","accounts.google.com");
+        response.addHeader("Access-Control-Allow-Origin","*");
         response.sendRedirect(oauthUrl.toString());
         return false;
     }

Reply via email to