1.0.1

• Fix for a bug where applications that already serve access-control-allow-origin CORS headers would serve the header twice, breaking things in surprising ways. #13

1.0

• Options to set access-control-allow-headers and access-control-allow-methods. Thanks, Thorben Westerhuys. #7
• callback can now also be an async def function. Thanks, Jordan Eremieff. #4
• Option to set access-control-max-age header. #12

asgi-cors 0.3

Added the callback= parameter:

def validate_origin(origin):
    return origin.startswith("https://")

app = asgi_cors(app, callback=validate_origin)

asgi-cors 0.2

Unit tests and a better README.