Access-control-allow-{methods,headers} headers

1 files changed, 2 insertions, 0 deletions

diff --git a/src/CamilStaps/BotleaguesApi/BotleaguesApiServiceProvider.php b/src/CamilStaps/BotleaguesApi/BotleaguesApiServiceProvider.php
index ef88f47..9914208 100644
--- a/src/CamilStaps/BotleaguesApi/BotleaguesApiServiceProvider.php
+++ b/src/CamilStaps/BotleaguesApi/BotleaguesApiServiceProvider.php
@@ -31,6 +31,8 @@ class BotleaguesApiServiceProvider extends ServiceProvider {
 
 		// To allow loading API requests from the specified domain
 		header('Access-Control-Allow-Origin: ' . Config::get('config.allowed_origin'));
+        header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE');
+        header('Access-Control-Allow-Headers: Authorization');
 		
 		$this->setupErrorHandlers();
 	}