From f1851e793bd95a4526b209889ab8e9c25ab07ab1 Mon Sep 17 00:00:00 2001 From: Mike Dilger Date: Fri, 21 Feb 2025 09:13:07 +1300 Subject: [PATCH] Allow Authorization Header explicitly (outside of OPTIONS) --- src/web/management/mod.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/web/management/mod.rs b/src/web/management/mod.rs index a711bb3..abf4d49 100644 --- a/src/web/management/mod.rs +++ b/src/web/management/mod.rs @@ -24,7 +24,7 @@ fn respond( let s: String = serde_json::to_string(&json)?; let response = Response::builder() .header("Access-Control-Allow-Origin", "*") - .header("Access-Control-Allow-Headers", "*") + .header("Access-Control-Allow-Headers", "Authorization, *") .header("Access-Control-Allow-Methods", "*") .header("Content-Type", "application/nostr+json+rpc") .status(status)