Re: Multiple Domain CORS

[Andrey Oktyabrskiy]

On 10.08.2018 14:38, Sathish Kumar wrote:

Is there anyway to allow CORS domain like based on Host Origin.For Options, Get and other methods.

Something like this should do what you want:

location / {
  include inc/cors_options.inc;
  ...
  include inc/cors_headers.inc;
}

### /etc/nginx/inc/cors_options.inc
if ($request_method = 'OPTIONS') {
  add_header Access-Control-Allow-Credentials        true;
  add_header Access-Control-Allow-Origin     $cors_origin;
  add_header Access-Control-Allow-Methods    OPTIONS;
  add_header Access-Control-Allow-Headers
    $http_access_control_request_headers;
  add_header Access-Control-Max-Age          86400;

  add_header Content-Type    'text/plain; charset=utf-8';
  add_header Content-Length  0;

  return  204;
}

### /etc/nginx/inc/cors_headers.inc
  add_header Access-Control-Allow-Credentials        true always;
  add_header Access-Control-Allow-Origin     $cors_origin always;
  add_header Access-Control-Allow-Methods    $cors_method always;
  add_header Access-Control-Allow-Headers
    $http_access_control_request_headers always;
  add_header Access-Control-Max-Age          86400        always;

### /etc/nginx/sites-enabled/_map_cors_method
map     $http_access_control_request_method     $cors_method {
  GET     GET;
  HEAD    HEAD;
  default OPTIONS;
}

$ cat /etc/nginx/sites-enabled/_map_cors_origin
map $http_origin $cors_origin {
  https://domain.ru https://domain.ru;
  ...
  default "";
}
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx