allow Authorization header in CORS request
This commit is contained in:
@@ -17,9 +17,10 @@ nelmio_cors:
|
|||||||
hosts: []
|
hosts: []
|
||||||
origin_regex: true
|
origin_regex: true
|
||||||
forced_allow_origin_value: ~
|
forced_allow_origin_value: ~
|
||||||
|
# allow_private_network: true
|
||||||
paths:
|
paths:
|
||||||
'^/api/':
|
'^/api/':
|
||||||
allow_origin: ['*']
|
allow_origin: ['*']
|
||||||
allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN', 'Content-Type']
|
allow_headers: ['X-AUTH-USER', 'X-AUTH-TOKEN', 'Content-Type', 'Authorization']
|
||||||
allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
|
allow_methods: ['GET', 'OPTIONS', 'POST', 'PUT', 'PATCH', 'DELETE']
|
||||||
max_age: 3600
|
max_age: 3600
|
||||||
|
|||||||
Reference in New Issue
Block a user