Merge pull request #3886 from rwmajor2/add_access_control_hdr_config

Allow access control headers to be overriden in jupyter_notebook_conf…
jupyter · Sep 7, 2018 · 872a6c7 · 872a6c7
2 parents 0abc822 + cc5e08d
commit 872a6c7
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/notebook/base/handlers.py b/notebook/base/handlers.py
@@ -607,8 +607,11 @@ def finish(self, *args, **kwargs):
         return super(APIHandler, self).finish(*args, **kwargs)
 
     def options(self, *args, **kwargs):
-        self.set_header('Access-Control-Allow-Headers',
-                        'accept, content-type, authorization, x-xsrftoken')
+        if 'Access-Control-Allow-Headers' in self.settings.get('headers', {}):
+            self.set_header('Access-Control-Allow-Headers', self.settings['headers']['Access-Control-Allow-Headers'])
+        else:
+            self.set_header('Access-Control-Allow-Headers',
+                            'accept, content-type, authorization, x-xsrftoken')
         self.set_header('Access-Control-Allow-Methods',
                         'GET, PUT, POST, PATCH, DELETE, OPTIONS')