mod_http_file_share: Allow 'Authorization' header via CORS (thanks kawaii)
authorKim Alvefur <zash@zash.se>
Wed, 20 Oct 2021 23:06:07 +0200
changeset 11861 e080d6aa0b3b
parent 11860 14a679588b7b
child 11862 2bcd84123eba
mod_http_file_share: Allow 'Authorization' header via CORS (thanks kawaii) Can't find anything saying anything on whether this is needed or not. kawaii reported that both Chrome and Firefox complained unless the header was added to the list of allowed headers.
plugins/mod_http_file_share.lua
--- a/plugins/mod_http_file_share.lua	Wed Oct 20 17:32:34 2021 +0200
+++ b/plugins/mod_http_file_share.lua	Wed Oct 20 23:06:07 2021 +0200
@@ -584,6 +584,9 @@
 		streaming_uploads = true;
 		cors = {
 			credentials = true;
+			headers = {
+				Authorization = true;
+			};
 		};
 		route = {
 			["PUT /*"] = handle_upload;