mirrors/seaweedfs
1
0
Fork 0
mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-09-07 16:46:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

address comment

Browse Source 
Service-level responses need both Access-Control-Allow-Methods and Access-Control-Allow-Headers. After setting Access-Control-Allow-Origin and Access-Control-Expose-Headers, also set Access-Control-Allow-Methods: * and Access-Control-Allow-Headers: * so service endpoints satisfy CORS preflight requirements.
This commit is contained in:
chrislu
2025-07-14 23:18:56 -07:00
parent 212dab3a34
commit b7294b3905
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
weed/s3api/s3err/error_handler.go
+2
View File
@@ -90,6 +90,8 @@ func setCommonHeaders(w http.ResponseWriter, r *http.Request) {
if !isBucketRequest && w.Header().Get("Access-Control-Allow-Origin") == "" {
// This is a service-level request (like OPTIONS /), apply static CORS
w.Header().Set("Access-Control-Allow-Origin", "*")
w.Header().Set("Access-Control-Allow-Methods", "*")
w.Header().Set("Access-Control-Allow-Headers", "*")
w.Header().Set("Access-Control-Expose-Headers", "*")
w.Header().Set("Access-Control-Allow-Credentials", "true")
}