Enable cors on deploy and apps

package.json

@@ -41,6 +41,7 @@
     "brfs": "^1.4.3",
     "browser-request": "^0.3.3",
     "browserify": "^13.0.0",
+    "cors": "^2.8.1",
     "date-and-time": "^0.3.0",
     "dom-css": "^2.0.0",
     "envify": "^3.4.1",

server/cors-settings.js

@@ -0,0 +1,5 @@
+var path = require('path')
+var fs = require('fs')
+
+var contents = fs.readFileSync(path.join(process.env['HOME'], '.binder/cors.conf'), 'utf8')
+module.exports = JSON.parse(contents)

server/index.js

@@ -5,6 +5,7 @@ var expressWs = require('express-ws')
 var bodyParser = require('body-parser')
 var app = express()
 var http = require('http').Server(app)
+var cors = require('cors');
 var io = require('socket.io')(http)
 var assign = require('object-assign')
 var merge = require('lodash.merge')
@@ -20,6 +21,10 @@ app.use('/js', express.static(path.join(__dirname, '../public/js')))
 app.use('/css', express.static(path.join(__dirname, '../public/css')))
 app.use('/assets', express.static(path.join(__dirname, '../public/assets')))
 
+// Cors options
+
+var launchCorsOptions = require('./cors-settings')
+
 // set once the server is started
 var binder = null
 
@@ -63,15 +68,15 @@ app.get('/validate/:name', function (req, res) {
 
 // API endpoints
 
-app.get('/api/deploy/:templateName', function (req, res) {
+app.get('/api/deploy/:templateName', cors(launchCorsOptions), function (req, res) {
   var name = req.params.templateName
   binder.deployBinder(name, function (err, status) {
     if (err) return res.status(500).end()
     return res.json(status)
   })
 })
 
-app.get('/api/apps/:templateName/:id', function (req, res) {
+app.get('/api/apps/:templateName/:id', cors(launchCorsOptions), function (req, res) {
   var name = req.params.templateName
   var id = req.params.id
   binder.getDeployStatus(name, id, function (err, status) {