mirror of
https://github.com/zkldi/Tachi.git
synced 2026-10-12 09:18:25 +03:00
fix: allow cross-origin Authorization header usage
and all methods this should be safe probably was there a reason i had this turned off? probably.
This commit is contained in:
@@ -92,8 +92,9 @@ if (Environment.nodeEnv !== "production" && IsNonEmptyString(ServerConfig.CLIENT
|
||||
} else {
|
||||
app.use((req, res, next) => {
|
||||
res.header("Access-Control-Allow-Origin", "*");
|
||||
res.header("Access-Control-Allow-Headers", "Content-Type, X-User-Intent, Authorization");
|
||||
res.header("Access-Control-Allow-Credentials", "false");
|
||||
res.header("Access-Control-Allow-Methods", "GET");
|
||||
res.header("Access-Control-Allow-Methods", "GET,POST,PATCH,PUT,DELETE,OPTIONS");
|
||||
next();
|
||||
});
|
||||
|
||||
|
||||
Reference in New Issue
Block a user