fix(cors): allow X-Signature headers for valid web requests

This commit is contained in:
Patrick Britton 2026-02-03 18:09:50 -06:00
parent 98637c6d9c
commit 403f522a0b

View file

@ -83,7 +83,7 @@ func main() {
return ok
},
AllowMethods: []string{"GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"},
AllowHeaders: []string{"Origin", "Content-Type", "Accept", "Authorization", "X-Request-ID"},
AllowHeaders: []string{"Origin", "Content-Type", "Accept", "Authorization", "X-Request-ID", "X-Timestamp", "X-Signature", "X-Algorithm"},
ExposeHeaders: []string{"Content-Length"},
AllowCredentials: true,
MaxAge: 12 * time.Hour,