X-Git-Url: https://git.auder.net/?p=vchess.git;a=blobdiff_plain;f=server%2Fapp.js;h=f97d925baebc5143795e830551a888a8af3761d0;hp=13cf1dbf321ce219624b0b08ff23de34b6299968;hb=1aeed627be63a298d3a093797c3728e3de30b464;hpb=f05815d7da84284bd9d7c1ce5b808acd675f2a3e

diff --git a/server/app.js b/server/app.js
index 13cf1dbf..f97d925b 100644
--- a/server/app.js
+++ b/server/app.js
@@ -35,7 +35,8 @@ if (params.cors.enable)
 {
 	app.use(function(req, res, next) {
 		res.header("Access-Control-Allow-Origin", params.cors.allowedOrigin);
-		res.header("Access-Control-Allow-Headers",
+		res.header("Access-Control-Allow-Credentials", true); //for cookies
+    res.header("Access-Control-Allow-Headers",
       "Origin, X-Requested-With, Content-Type, Accept");
 	  res.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS, PUT, DELETE");
     next();