GH-171: Access-Control-Allow-Headers mirrors the Access-Control-Reque…

…st-Headers values.
resgateio · Sep 5, 2020 · a7e139c · a7e139c
1 parent af2aa44
commit a7e139c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/server/apiHandler.go b/server/apiHandler.go
@@ -57,6 +57,10 @@ func (s *Service) apiHandler(w http.ResponseWriter, r *http.Request) {
 	err := s.setCommonHeaders(w, r)
 	if r.Method == "OPTIONS" {
 		w.Header().Set("Access-Control-Allow-Methods", s.cfg.allowMethods)
+		reqHeaders := r.Header["Access-Control-Request-Headers"]
+		if len(reqHeaders) > 0 {
+			w.Header()["Access-Control-Allow-Headers"] = reqHeaders
+		}
 		return
 	}
 	if err != nil {