Skip to content
Snippets Groups Projects
Commit c071c9db authored by Sylvain Le Bon's avatar Sylvain Le Bon
Browse files

bugfix: include necessary headers by default

parent b41cf83e
No related branches found
Tags v2.3.19
2 merge requests!253major: switched to Django 4.2, python 3.11 and improved performances,!252update: added an ordering on models to prevent warning: Pagination may yield...
Pipeline #15069 failed
...@@ -28,7 +28,7 @@ class AllowRequestedCORSMiddleware: ...@@ -28,7 +28,7 @@ class AllowRequestedCORSMiddleware:
response["Access-Control-Allow-Methods"] = "GET,POST,PUT,PATCH,DELETE,OPTIONS,HEAD" response["Access-Control-Allow-Methods"] = "GET,POST,PUT,PATCH,DELETE,OPTIONS,HEAD"
response["Access-Control-Allow-Headers"] = \ response["Access-Control-Allow-Headers"] = \
getattr(settings, 'OIDC_ACCESS_CONTROL_ALLOW_HEADERS', getattr(settings, 'OIDC_ACCESS_CONTROL_ALLOW_HEADERS',
"authorization, Content-Type, if-match, accept, DPoP") "authorization, Content-Type, if-match, accept, DPoP, cache-control, prefer")
response["Access-Control-Expose-Headers"] = "Location, User" response["Access-Control-Expose-Headers"] = "Location, User"
response["Access-Control-Allow-Credentials"] = 'true' response["Access-Control-Allow-Credentials"] = 'true'
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment