Allow the X-Requested-With header in CORS on the OAuth endpoints

sandhose · sandhose · commit 514cd8e389aa · 2025-05-07T14:50:03.000+02:00
diff --git a/crates/handlers/src/lib.rs b/crates/handlers/src/lib.rs
@@ -249,6 +249,8 @@ where
                     ACCEPT_LANGUAGE,
                     CONTENT_LANGUAGE,
                     CONTENT_TYPE,
+                    // Swagger will send this header, so we have to allow it to avoid CORS errors
+                    HeaderName::from_static("x-requested-with"),
                 ])
                 .max_age(Duration::from_secs(60 * 60)),
         )

Original file line number	Diff line number	Diff line change
`@@ -249,6 +249,8 @@ where`
`249`	`249`	`ACCEPT_LANGUAGE,`
`250`	`250`	`CONTENT_LANGUAGE,`
`251`	`251`	`CONTENT_TYPE,`
	`252`	`+ // Swagger will send this header, so we have to allow it to avoid CORS errors`
	`253`	`+ HeaderName::from_static("x-requested-with"),`
`252`	`254`	`])`
`253`	`255`	`.max_age(Duration::from_secs(60 * 60)),`
`254`	`256`	`)`