--- a/src/irinotes/settings.py	Thu Jun 15 12:41:44 2017 +0200
+++ b/src/irinotes/settings.py	Thu Jun 15 13:00:32 2017 +0200
@@ -51,6 +51,7 @@
     'django.contrib.sites',
     'django_extensions',
     'irinotes',
+    'corsheaders',
     'rest_framework',
     'rest_framework.authtoken',
     'allauth',
@@ -64,6 +65,7 @@
 
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
@@ -227,3 +229,8 @@
 
 REST_USE_JWT = True
 OLD_PASSWORD_FIELD_ENABLED = True
+
+# CORS Headers
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_URLS_REGEX = r'^/api/.*$'
+

--- a/src/requirements/base.txt	Thu Jun 15 12:41:44 2017 +0200
+++ b/src/requirements/base.txt	Thu Jun 15 13:00:32 2017 +0200
@@ -6,6 +6,7 @@
 django-allauth==0.32.0
 django-colorful==1.2
 django-concurrency==1.3.2
+django-cors-headers==2.1.0
 django-extensions==1.7.9
 django-filter==1.0.4
 django-guardian==1.4.8

--- a/src/setup.py	Thu Jun 15 12:41:44 2017 +0200
+++ b/src/setup.py	Thu Jun 15 13:00:32 2017 +0200
@@ -146,6 +146,7 @@
             "djangorestframework-jwt",
             "django-guardian >= 1.4",
             "django-colorful",
+            "django-cors-headers",
             "django-concurrency",
             "django-filter",
             "drf-nested-routers",