fix: Configure CORS properly to allow authorization and content-type header

This commit is contained in:
oSumAtrIX 2024-09-30 01:27:14 +02:00
parent 710416ff36
commit 6442757927
No known key found for this signature in database
GPG Key ID: A9B3094ACDB604B4

View File

@ -1,6 +1,7 @@
package app.revanced.api.configuration package app.revanced.api.configuration
import app.revanced.api.configuration.repository.ConfigurationRepository import app.revanced.api.configuration.repository.ConfigurationRepository
import io.ktor.http.*
import io.ktor.server.application.* import io.ktor.server.application.*
import io.ktor.server.plugins.* import io.ktor.server.plugins.*
import io.ktor.server.plugins.cors.routing.* import io.ktor.server.plugins.cors.routing.*
@ -13,6 +14,11 @@ fun Application.configureHTTP() {
val configurationRepository = get<ConfigurationRepository>() val configurationRepository = get<ConfigurationRepository>()
install(CORS) { install(CORS) {
allowHeader(HttpHeaders.ContentType)
allowHeader(HttpHeaders.Authorization)
allowCredentials = true
configurationRepository.corsAllowedHosts.forEach { host -> configurationRepository.corsAllowedHosts.forEach { host ->
allowHost( allowHost(
host = host, host = host,