allow Authorization header in CORS request

2024-09-20 23:26:29 +02:00
parent 036b297a76
commit 3fd770047e
1 changed files with 2 additions and 1 deletions
--- a/config/packages/nelmio_cors.yaml
+++ b/config/packages/nelmio_cors.yaml
@@ -17,9 +17,10 @@ nelmio_cors:
        hosts: []
        origin_regex: true
        forced_allow_origin_value: ~
+#        allow_private_network: true
    paths:
        '^/api/':
            allow_origin: ['*']
-            allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN', 'Content-Type']
+            allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN', 'Content-Type', 'Authorization']
            allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
            max_age: 3600