Merge pull request #66 from everpcpc/fix-cors

fix: more cors settings
databendlabs-x · May 19, 2023 · 6272e47 · 6272e47 · vercel · May 19, 2023
2 parents d8b7a2b + 4ee0141
commit 6272e47
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/app/src/api/http.rs b/app/src/api/http.rs
@@ -13,6 +13,7 @@
 // limitations under the License.
 
 use actix_cors::Cors;
+use actix_web::http;
 use actix_web::web;
 use actix_web::App;
 use actix_web::HttpServer;
@@ -43,7 +44,14 @@ impl APIHandler {
         let data = self.db.clone();
 
         HttpServer::new(move || {
-            let mut cors = Cors::default();
+            let mut cors = Cors::default()
+                .allowed_methods(vec!["GET", "POST"])
+                .allowed_headers(vec![
+                    http::header::AUTHORIZATION,
+                    http::header::ACCEPT,
+                    http::header::CONTENT_TYPE,
+                ])
+                .max_age(3600);
             for origin in &conf.cors {
                 cors = cors.allowed_origin(origin);
             }