Specify entire subdomain

[cyu]

Specify entire subdomain

[cyu]

Sorry - I don't know why I ever said you can do that. Wildcard doesn't work, use a regular expression instead:

config.middleware.use Rack::Cors do
  allow do
    origins /http:\/\/(.*?)\.example\.com/
    resource '*', :headers => :any, :methods => [:get, :post, :options]
  end
end

[imgarylai]

This is my regex example:

/\Ahttps?:\/\/([a-zA-Z\d-]+\.){0,}example\.com\/?\z/

My example can match https and end up with top level domain. For example https://example.com.hello.world is not a valid domain.

[raywu]

Does origing have to match http:// or https://? Matching subdomain.example.com has worked for me, but the doc is unclear.

/^(.*\.|)example\.com$/ might work (regexr)

[cyu]

Try this:

config.middleware.use Rack::Cors do
  allow do
    origins '*.example.com'
    resource '*', :headers => :any, :methods => [:get, :post, :options]
  end
end

UPDATE: This example doesn't work. Instead use the regular expression example below.

[sakirtemel]

I've created a wiki for that as it might be useful for the others, later maybe it can be moved to README. Thanks @raywu for the regex and the link it was useful, I copied actually that one to the wiki

[imi56]

Sorry - I don't know why I ever said you can do that. Wildcard doesn't work, use a regular expression instead:

config.middleware.use Rack::Cors do
  allow do
    origins /http:\/\/(.*?)\.example\.com/
    resource '*', :headers => :any, :methods => [:get, :post, :options]
  end
end

This will match anything.example.com.co.in as well which might not be desired expectation.

[ramanbuttar]

origins '*.example.com' doesn't work. Wildcard is not being read as intended.

[buren]

@ramanbuttar is absolutely right. origins '*.example.com' will not allow test.example.com

[ryanwjackson]

did this ever get resolved? Is there a way around it?