Expose Link headers via CORS

diff --git a/config/application.rb b/config/application.rb
index d44835957475203cecc0a83dcb6e43513ad36872..8da5ade3cf34ac32b057e5e7b6b5949d436b165a 100644 (file)
--- a/config/application.rb
+++ b/config/application.rb
@@ -34,7 +34,7 @@ module Mastodon
       allow do
         origins  '*'
 
-        resource '/api/*',       headers: :any, methods: [:post, :put, :delete, :get, :options], credentials: false
+        resource '/api/*',       headers: :any, methods: [:post, :put, :delete, :get, :options], credentials: false, expose: ['Link', 'X-RateLimit-Reset', 'X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-Request-Id']
         resource '/oauth/token', headers: :any, methods: [:post], credentials: false
       end
     end