fix: whitelist authorization header for CORS

2025-12-23 17:25:22 +03:00 · 2025-06-02 15:55:29 +02:00
parent bd1c69b7b7
commit b9489b5e9a
1 changed files with 1 additions and 0 deletions
--- a/backend/internal/middleware/cors.go
+++ b/backend/internal/middleware/cors.go
@@ -26,6 +26,7 @@ func (m *CorsMiddleware) Add() gin.HandlerFunc {
 		}

 		c.Writer.Header().Set("Access-Control-Allow-Origin", "*")
+		c.Writer.Header().Set("Access-Control-Allow-Headers", "Authorization")
 		c.Writer.Header().Set("Access-Control-Allow-Methods", "GET, POST")

 		// Preflight request