NPA-3922 Update Sandbox CORS response

NHSDigital · Oct 30, 2024 · bc03388 · bc03388
1 parent 8417abc
commit bc03388
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/proxies/live/apiproxy/policies/AssignMessage.AddCors.xml b/proxies/live/apiproxy/policies/AssignMessage.AddCors.xml
@@ -4,7 +4,7 @@
     <Set>
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
-            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id</Header>
+            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-correlation-id, x-request-id</Header>
             <!--you can add headers here if you want to expose
             <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
             <Header name="Access-Control-Max-Age">3628800</Header>

diff --git a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
@@ -4,7 +4,7 @@
     <Set>
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
-            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-correlation-id, x-request-id</Header>
+            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id</Header>
             <!--you can add headers here if you want to expose
             <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
             <Header name="Access-Control-Max-Age">3628800</Header>