allow Authorization header in CORS

siemens · Nov 13, 2020 · b64d466 · b64d466
1 parent 101f587
commit b64d466
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/server.go b/server/server.go
@@ -254,8 +254,8 @@ func (s *Server) setUpCORS() {
 	if s.options.CORSOrigins != nil && len(s.options.CORSOrigins) > 0 {
 		corsConfig := cors.DefaultConfig()
 		corsConfig.AllowOrigins = s.options.CORSOrigins
-		corsConfig.AllowMethods = []string{"POST", "GET"}
-		corsConfig.AllowHeaders = []string{"last-event-id"}
+		corsConfig.AllowMethods = []string{"POST", "GET", "OPTIONS"}
+		corsConfig.AllowHeaders = []string{"last-event-id", "Authorization"}
 		corsConfig.AllowCredentials = true
 		log.Printf("Using CORS headers: %v", corsConfig.AllowOrigins)
 		s.server.Use(cors.New(corsConfig))