CORS - allow authenticated responses

2020-05-20 07:01:14 +02:00 · 2020-05-20 07:01:14 +02:00 · 2fbd31f5e0
commit 2fbd31f5e0
parent d438af342c
1 changed files with 3 additions and 1 deletions
--- a/freqtrade/rpc/api_server.py
+++ b/freqtrade/rpc/api_server.py
@ -89,7 +89,9 @@ class ApiServer(RPC):

        self._config = freqtrade.config
        self.app = Flask(__name__)
-        self._cors = CORS(self.app, resources={r"/api/*": {"origins": "*"}})
+        self._cors = CORS(self.app,
+                          resources={r"/api/*": {"origins": "*", "supports_credentials": True}},
+                          )

        # Setup the Flask-JWT-Extended extension
        self.app.config['JWT_SECRET_KEY'] = self._config['api_server'].get(