in app/controllers/Login.scala [30:45]
private def cors(result: Result, allowedMethods: Option[String] = None)(implicit request: RequestHeader): Result = {
val responseHeaders = (defaultAllowHeaders ++ request.headers.get("Access-Control-Request-Headers").toList) mkString ","
request.headers.get("Origin") match {
case None => result
case Some(requestOrigin) if LoginConfig.isValidUrl(config.domain, requestOrigin) => {
val headers = allowedMethods.map("Access-Control-Allow-Methods" -> _).toList ++ List(
"Access-Control-Allow-Origin" -> requestOrigin,
"Access-Control-Allow-Headers" -> responseHeaders,
"Access-Control-Allow-Credentials" -> "true")
result.withHeaders(headers: _*)
}
case Some(requestOrigin) => Unauthorized
}
}