pkg/cors: add authorization into Access-Control-Allow-Headers

This helps browser to send auth-related request to etcd server when
cors flag is set.
This commit is contained in:
Yicheng Qin 2015-10-28 13:58:04 -07:00
parent b5c176360e
commit d6b4c7b67c

View File

@ -65,7 +65,7 @@ type CORSHandler struct {
func (h *CORSHandler) addHeader(w http.ResponseWriter, origin string) {
w.Header().Add("Access-Control-Allow-Methods", "POST, GET, OPTIONS, PUT, DELETE")
w.Header().Add("Access-Control-Allow-Origin", origin)
w.Header().Add("Access-Control-Allow-Headers", "accept, content-type")
w.Header().Add("Access-Control-Allow-Headers", "accept, content-type, authorization")
}
// ServeHTTP adds the correct CORS headers based on the origin and returns immediately