function _M.replaceHeaders()

in scripts/lua/cors.lua [40:55]


function _M.replaceHeaders()
  if ngx.var.cors_origins ~= nil and ngx.var.cors_origins ~= '' then
    if ngx.var.cors_origins == 'false' then
      ngx.header['Access-Control-Allow-Origin'] = nil
      ngx.header['Access-Control-Allow-Methods'] = nil
      ngx.header['Access-Control-Allow-Headers'] = nil
      ngx.header['Access-Control-Allow-Credentials'] = nil
      ngx.header['Access-Control-Expose-Headers'] = nil
      ngx.header['Access-Control-Max-Age'] = nil
    else
      ngx.header['Access-Control-Allow-Origin'] = ngx.var.cors_origins == 'true' and (ngx.var.http_origin or '*') or ngx.var.cors_origins
      ngx.header['Access-Control-Allow-Methods'] = ngx.var.cors_methods or 'GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS'
      ngx.header['Access-Control-Allow-Credentials'] = 'true'
    end
  end
end