🐛 Add Access-Control-Allow-Credentials to header

soxft · Aug 16, 2024 · bf8e45a · bf8e45a
1 parent c50dd8b
commit bf8e45a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/app/middleware/cors.go b/app/middleware/cors.go
@@ -16,9 +16,11 @@ func Cors() gin.HandlerFunc {
 		}
 
 		c.Header("Server", "busuanzi-by-xcsoft/"+config.VERSION)
+
 		if c.Request.Method == "OPTIONS" {
 			c.Header("Access-Control-Allow-Methods", "GET, POST, HEAD, OPTIONS")
 			c.Header("Access-Control-Allow-Headers", "x-bsz-referer, Authorization")
+			c.Header("Access-Control-Allow-Credentials", "true")
 			c.Header("Access-Control-Max-Age", "86400")
 			c.AbortWithStatus(204)
 			return