fix: enhance CORS configuration with explicit methods and headers
This commit is contained in:
parent
005d368dc7
commit
33008b64ce
@ -18,7 +18,11 @@ async function bootstrap() {
|
|||||||
|
|
||||||
app.enableCors({
|
app.enableCors({
|
||||||
origin: allowedOrigins,
|
origin: allowedOrigins,
|
||||||
|
methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
|
||||||
|
allowedHeaders: ['Content-Type', 'Authorization', 'Accept', 'Origin'],
|
||||||
|
exposedHeaders: ['Content-Range', 'X-Content-Range'],
|
||||||
credentials: true,
|
credentials: true,
|
||||||
|
maxAge: 3600,
|
||||||
});
|
});
|
||||||
|
|
||||||
app.setGlobalPrefix('api/v1');
|
app.setGlobalPrefix('api/v1');
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user