fix: allow cross-origin Authorization header usage

and all methods

this should be safe
probably

was there a reason i had this turned off? probably.
This commit is contained in:
zkldi
2023-03-28 15:19:32 +01:00
parent 289fb66f3d
commit 9df7e84d19
+2 -1
View File
@@ -92,8 +92,9 @@ if (Environment.nodeEnv !== "production" && IsNonEmptyString(ServerConfig.CLIENT
} else {
app.use((req, res, next) => {
res.header("Access-Control-Allow-Origin", "*");
res.header("Access-Control-Allow-Headers", "Content-Type, X-User-Intent, Authorization");
res.header("Access-Control-Allow-Credentials", "false");
res.header("Access-Control-Allow-Methods", "GET");
res.header("Access-Control-Allow-Methods", "GET,POST,PATCH,PUT,DELETE,OPTIONS");
next();
});