#89: Add Authorization to CORS headers

11 years ago · 8b1e91a2e5
parent b6202150f7
commit 8b1e91a2e5
1 changed files with 1 additions and 1 deletions
--- a/http.c
+++ b/http.c
@ -37,7 +37,7 @@ http_response_init(struct worker *w, int code, const char *msg) {
 	Access-Control-Allow-Headers cannot be a wildcard and must be set
 	with explicit names
 	*/
-	http_response_set_header(r, "Access-Control-Allow-Headers", "X-Requested-With, Content-Type");
+	http_response_set_header(r, "Access-Control-Allow-Headers", "X-Requested-With, Content-Type, Authorization");

 	return r;
 }