Better CORS response

2024-04-07 08:25:07 +01:00
parent 265c52a7e5
commit c1443191ce
1 changed files with 6 additions and 1 deletions
--- a/routes/_middleware.tsx
+++ b/routes/_middleware.tsx
@@ -12,7 +12,12 @@ export const handler = [
      const origin = request.headers.get('Origin') || '*';
      const headers = response.headers;
      headers.set('Access-Control-Allow-Origin', origin);
-      headers.set('Access-Control-Allow-Methods', 'DELETE');
+      headers.set('Access-Control-Allow-Credentials', 'true');
+      headers.set('Access-Control-Allow-Methods', 'POST, OPTIONS, GET, PUT, DELETE');
+      headers.set(
+        'Access-Control-Allow-Headers',
+        'Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With',
+      );
      return response;
    }