Spiegel von
https://github.com/dani-garcia/vaultwarden.git
synchronisiert 2024-11-26 05:50:29 +01:00
Merge pull request #631 from vverst/cors-put
Use Access-Control-Allow-Method
Dieser Commit ist enthalten in:
Commit
8367d1d715
1 geänderte Dateien mit 3 neuen und 3 gelöschten Zeilen
|
@ -47,7 +47,7 @@ impl CORS {
|
|||
impl Fairing for CORS {
|
||||
fn info(&self) -> Info {
|
||||
Info {
|
||||
name: "Add CORS headers to requests",
|
||||
name: "CORS",
|
||||
kind: Kind::Response
|
||||
}
|
||||
}
|
||||
|
@ -60,12 +60,12 @@ impl Fairing for CORS {
|
|||
|
||||
let req_allow_headers = CORS::get_header(&req_headers, "Access-Control-Request-Headers");
|
||||
|
||||
let req_allow_methods =CORS::get_header(&req_headers,"Access-Control-Request-Methods");
|
||||
let req_allow_method = CORS::get_header(&req_headers,"Access-Control-Request-Method");
|
||||
|
||||
if request.method() == Method::Options || response.content_type() == Some(ContentType::JSON) {
|
||||
// Requests with credentials need explicit values since they do not allow wildcards.
|
||||
response.set_header(Header::new("Access-Control-Allow-Origin", req_allow_origin));
|
||||
response.set_header(Header::new("Access-Control-Allow-Methods", req_allow_methods));
|
||||
response.set_header(Header::new("Access-Control-Allow-Methods", req_allow_method));
|
||||
response.set_header(Header::new("Access-Control-Allow-Headers", req_allow_headers));
|
||||
response.set_header(Header::new("Access-Control-Allow-Credentials", "true"));
|
||||
}
|
||||
|
|
Laden …
In neuem Issue referenzieren