From 144221908b085a113a148de767d7317e22e59308 Mon Sep 17 00:00:00 2001
From: Jordi <ledfusion@users.noreply.github.com>
Date: Tue, 5 Feb 2019 13:42:11 +0100
Subject: [PATCH] Adding CORS headers

---
 cmd/censushttp/README.md |  2 +-
 service/censusmanager.go | 12 ++++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/cmd/censushttp/README.md b/cmd/censushttp/README.md
index f00433d..1625546 100644
--- a/cmd/censushttp/README.md
+++ b/cmd/censushttp/README.md
@@ -7,7 +7,7 @@ Reference implementation of a voting census service running on the Vocdoni platf
 In a GO ready environment:
 
 ```
-go get -u github.com/vocdoni/dvote-census
+go get -u github.com/vocdoni/dvote-census/...
 go build -o censusHttpService github.com/vocdoni/dvote-census/cmd/censushttp
 ```
 
diff --git a/service/censusmanager.go b/service/censusmanager.go
index 6b56b85..ffbed77 100644
--- a/service/censusmanager.go
+++ b/service/censusmanager.go
@@ -71,7 +71,19 @@ func checkAuth(timestamp, signature, message string) bool {
 	return false
 }
 
+func addCorsHeaders(w *http.ResponseWriter, req *http.Request) {
+	(*w).Header().Set("Access-Control-Allow-Origin", "*")
+	(*w).Header().Set("Access-Control-Allow-Methods", "POST, GET, OPTIONS")
+	(*w).Header().Set("Access-Control-Allow-Headers", "Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization")
+}
+
 func claimHandler(w http.ResponseWriter, req *http.Request, op string) {
+	addCorsHeaders(&w, req)
+
+	if (*req).Method == "OPTIONS" {
+		return
+	}
+
 	var c Claim
 	var resp Result
 	if ok := checkRequest(w, req); !ok {