From afae2a11f2369463f9340c07e593334864f82339 Mon Sep 17 00:00:00 2001
From: Erik Demaine <edemaine@mit.edu>
Date: Thu, 12 Oct 2017 15:44:23 -0400
Subject: [PATCH] Most of file upload on Cordova #253

---
 lib/files.coffee | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/lib/files.coffee b/lib/files.coffee
index 351e8f06..bb47d09b 100644
--- a/lib/files.coffee
+++ b/lib/files.coffee
@@ -1,3 +1,9 @@
+corsHandler = (req, res, next) ->
+  if req.headers?.origin
+    res.setHeader 'Access-Control-Allow-Origin', req.headers.origin
+    res.setHeader 'Access-Control-Allow-Credentials', true
+  next()
+
 @Files = FileCollection
   resumable: true
   resumableIndexName: 'files'
@@ -6,6 +12,29 @@
     path: '/id/:_id'
     lookup: (params, query) ->
       _id: params._id
+    handler: corsHandler
+  ,
+    method: 'post'
+    path: '/_resumable'
+    lookup: -> {}
+    handler: corsHandler
+  ,
+    method: 'head'
+    path: '/_resumable'
+    lookup: -> {}
+    handler: corsHandler
+  ,
+    method: 'options'
+    path: '/_resumable'
+    lookup: -> {}
+    handler: (req, res, next) ->
+      res.writeHead 200,
+        'Content-Type': 'text/plain'
+        'Access-Control-Allow-Origin': req.headers.origin
+        'Access-Control-Allow-Credentials': true
+        'Access-Control-Allow-Headers': 'x-auth-token, user-agent'
+        'Access-Control-Allow-Methods': 'GET, POST, HEAD, OPTIONS'
+      res.end()
   ]
 
 if Meteor.isServer