From 3fd770047e08af5ed35f9ca764d252e050d76413 Mon Sep 17 00:00:00 2001 From: Kevin Papst Date: Fri, 20 Sep 2024 23:26:29 +0200 Subject: [PATCH] allow Authorization header in CORS request --- config/packages/nelmio_cors.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/config/packages/nelmio_cors.yaml b/config/packages/nelmio_cors.yaml index 90154c8f..965cd61c 100644 --- a/config/packages/nelmio_cors.yaml +++ b/config/packages/nelmio_cors.yaml @@ -17,9 +17,10 @@ nelmio_cors: hosts: [] origin_regex: true forced_allow_origin_value: ~ +# allow_private_network: true paths: '^/api/': allow_origin: ['*'] - allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN', 'Content-Type'] + allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN', 'Content-Type', 'Authorization'] allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE'] max_age: 3600