From eb520a2feb24ab2d62564a08b03f5fa17fbfa98b Mon Sep 17 00:00:00 2001
From: Andrei Baragan <andrei@brainient.com>
Date: Wed, 3 Feb 2016 12:08:05 +0200
Subject: [PATCH] feat(cors): Adds support for Credentials header

---
 lib/http-server.js | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/lib/http-server.js b/lib/http-server.js
index 8d849109e..faf25820b 100644
--- a/lib/http-server.js
+++ b/lib/http-server.js
@@ -71,9 +71,16 @@ function HttpServer(options) {
       options.corsHeaders.split(/\s*,\s*/)
           .forEach(function (h) { this.headers['Access-Control-Allow-Headers'] += ', ' + h; }, this);
     }
-    before.push(corser.create(options.corsHeaders ? {
-      requestHeaders: this.headers['Access-Control-Allow-Headers'].split(/\s*,\s*/)
-    } : null));
+
+    var corserOptions = {
+      supportsCredentials: true
+    };
+
+    if (options.corsHeaders) {
+      corserOptions.requestHeaders = this.headers['Access-Control-Allow-Headers'].split(/\s*,\s*/);
+    }
+
+    before.push(corser.create(corserOptions));
   }
 
   if (options.robots) {