add Access-Control-Allow-Headers: x-netdata-auth (#18477)
Costa Tsaousis committed
Sep 4, 2024 at 15:07 UTC
a50aefce52558fcc807e75beb1ed105a1c336bf7
1 file changed
+2
-2
src/web/server/web_client.c
+2
-2
@@ -903,8 +903,8 @@ void web_client_build_http_header(struct web_client *w) {
903
904
if(w->mode == HTTP_REQUEST_MODE_OPTIONS) {
905
buffer_strcat(w->response.header_output,
906
- "Access-Control-Allow-Methods: GET, OPTIONS\r\n"
907
- "Access-Control-Allow-Headers: accept, x-requested-with, origin, content-type, cookie, pragma, cache-control, x-auth-token\r\n"
906
+ "Access-Control-Allow-Methods: GET, POST, OPTIONS\r\n"
907
+ "Access-Control-Allow-Headers: accept, x-requested-with, origin, content-type, cookie, pragma, cache-control, x-auth-token, x-netdata-auth\r\n"
908
"Access-Control-Max-Age: 1209600\r\n" // 86400 * 14
909
);
910
}