Allows all methods in CORS.

See https://github.com/TeamPiped/Piped/pull/2471
This commit is contained in:
Kavin 2023-05-31 04:10:38 +01:00
parent 276f405692
commit 67d13a4b20
No known key found for this signature in database
GPG key ID: 49451E4482CC5BCD

View file

@ -4,8 +4,7 @@ import io.activej.http.*;
import io.activej.promise.Promisable;
import org.jetbrains.annotations.NotNull;
import static io.activej.http.HttpHeaders.ACCESS_CONTROL_ALLOW_HEADERS;
import static io.activej.http.HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN;
import static io.activej.http.HttpHeaders.*;
public class CustomServletDecorator implements AsyncServlet {
@ -24,8 +23,10 @@ public class CustomServletDecorator implements AsyncServlet {
HttpHeaderValue headerValue = HttpHeaderValue.of("app;dur=" + (System.nanoTime() - before) / 1000000.0);
return response.withHeader(HEADER, headerValue).withHeader(ACCESS_CONTROL_ALLOW_ORIGIN, "*")
.withHeader(ACCESS_CONTROL_ALLOW_HEADERS, "*, Authorization");
return response.withHeader(HEADER, headerValue)
.withHeader(ACCESS_CONTROL_ALLOW_ORIGIN, "*")
.withHeader(ACCESS_CONTROL_ALLOW_HEADERS, "*, Authorization")
.withHeader(ACCESS_CONTROL_ALLOW_METHODS, "*");
});
}