From 9df7e84d19f6d0c1144e6c3bbde1b48b5f63c91d Mon Sep 17 00:00:00 2001
From: zkldi <20380519+zkldi@users.noreply.github.com>
Date: Tue, 28 Mar 2023 15:19:22 +0100
Subject: [PATCH] fix: allow cross-origin Authorization header usage

and all methods

this should be safe
probably

was there a reason i had this turned off? probably.
---
 server/src/server/server.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/src/server/server.ts b/server/src/server/server.ts
index 98de35400..c0d17fe11 100644
--- a/server/src/server/server.ts
+++ b/server/src/server/server.ts
@@ -92,8 +92,9 @@ if (Environment.nodeEnv !== "production" && IsNonEmptyString(ServerConfig.CLIENT
 } else {
 	app.use((req, res, next) => {
 		res.header("Access-Control-Allow-Origin", "*");
+		res.header("Access-Control-Allow-Headers", "Content-Type, X-User-Intent, Authorization");
 		res.header("Access-Control-Allow-Credentials", "false");
-		res.header("Access-Control-Allow-Methods", "GET");
+		res.header("Access-Control-Allow-Methods", "GET,POST,PATCH,PUT,DELETE,OPTIONS");
 		next();
 	});