fix(modern-js-plugin): set cors responseHeaders as * (#3088)

Co-authored-by: Zack Jackson <[email protected]>

Author: 2heal1

.changeset/sixty-camels-ring.md

@@ -0,0 +1,5 @@
+---
+'@module-federation/modern-js': patch
+---
+
+fix(modern-js-plugin): set cors responseHeaders as \*

packages/modernjs/src/cli/configPlugin.ts

@@ -113,8 +113,7 @@ export const moduleFederationConfigPlugin = (
                 'Access-Control-Allow-Origin': '*',
                 'Access-Control-Allow-Methods':
                   'GET, POST, PUT, DELETE, PATCH, OPTIONS',
-                'Access-Control-Allow-Headers':
-                  'X-Requested-With, content-type, Authorization',
+                'Access-Control-Allow-Headers': '*',
               },
             },
           },
@@ -130,7 +129,7 @@ export const moduleFederationConfigPlugin = (
             },
             enableAsyncEntry:
               bundlerType === 'rspack'
-                ? modernjsConfig.source?.enableAsyncEntry ?? true
+                ? (modernjsConfig.source?.enableAsyncEntry ?? true)
                 : modernjsConfig.source?.enableAsyncEntry,
           },
           dev: {

packages/modernjs/src/cli/ssrPlugin.ts

@@ -102,10 +102,7 @@ export const moduleFederationSSRPlugin = (
                         'Access-Control-Allow-Methods',
                         'GET, POST, PUT, DELETE, PATCH, OPTIONS',
                       );
-                      res.setHeader(
-                        'Access-Control-Allow-Headers',
-                        'X-Requested-With, content-type, Authorization',
-                      );
+                      res.setHeader('Access-Control-Allow-Headers', '*');
                       fs.createReadStream(filepath).pipe(res);
                     } else {
                       next();