CORS settings

example-settings.yml

@@ -14,6 +14,7 @@ dependencies:
 - djangoldp-conversation
 - djangoldp-uploader
 - djangoldp-skill
+- django-cors-headers
 
 ldppackages:
 - djangoldp_i18n
@@ -73,3 +74,21 @@ server:
 
   WEBPUSH_SETTINGS:
     VAPID_ADMIN_EMAIL: "test@example.com"
+
+  CORS_ALLOWED_ORIGINS:
+   - "http://localhost:1234"
+
+  CORS_ALLOW_HEADERS:
+   - 'accept'
+   - 'accept-encoding'
+   - 'authorization'
+   - 'content-type'
+   - 'dnt'
+   - 'origin'
+   - 'user-agent'
+   - 'x-csrftoken'
+   - 'x-requested-with'
+   - 'dpop'
+
+  CORS_ALLOW_CREDENTIALS: True
+