Allow Authorization Header explicitly (outside of OPTIONS)

This commit is contained in:
Mike Dilger 2025-02-21 09:13:07 +13:00
parent add3a9da9c
commit f1851e793b
No known key found for this signature in database
GPG Key ID: 47581A78D4329BA4

View File

@ -24,7 +24,7 @@ fn respond(
let s: String = serde_json::to_string(&json)?;
let response = Response::builder()
.header("Access-Control-Allow-Origin", "*")
.header("Access-Control-Allow-Headers", "*")
.header("Access-Control-Allow-Headers", "Authorization, *")
.header("Access-Control-Allow-Methods", "*")
.header("Content-Type", "application/nostr+json+rpc")
.status(status)