gh-958 explicitly set CORS Allow-Headers

Otherwise Firefox and Safari wouldn't accept the CORS preflight (OPTIONS) request.
weaviate · Aug 26, 2019 · d374ddf · d374ddf
1 parent 56feea3
commit d374ddf
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.gitignore b/.gitignore
@@ -86,3 +86,5 @@ data/
 docker-compose/runtime-stable/data
 docker-compose/runtime-unstable/data
 c.out
+
+esbackups/
diff --git a/adapters/handlers/rest/middlewares.go b/adapters/handlers/rest/middlewares.go
@@ -78,7 +78,7 @@ func addPreflight(next http.Handler) http.Handler {
 		if r.Method == "OPTIONS" {
 			w.Header().Set("Access-Control-Allow-Origin", "*")
 			w.Header().Set("Access-Control-Allow-Methods", "*")
-			w.Header().Set("Access-Control-Allow-Headers", "*")
+			w.Header().Set("Access-Control-Allow-Headers", "Content-Type, Authorization, Batch")
 			return
 		}