diff --git a/djangoldp/views.py b/djangoldp/views.py index eb7cfbdab9dd46ad8180003c69e08c17bf16bfc5..c21bd1f72d16a31201874adc0b9b9569a95ee79b 100644 --- a/djangoldp/views.py +++ b/djangoldp/views.py @@ -135,8 +135,8 @@ class LDPViewSet(LDPViewSetGenerator): def dispatch(self, request, *args, **kwargs): response = super(LDPViewSet, self).dispatch(request, *args, **kwargs) response["Access-Control-Allow-Origin"] = request.META.get('HTTP_ORIGIN') - response["Access-Control-Allow-Methods"] = "POST,PUT, PATCH" - response["Access-Control-Allow-Headers"] = "Content-Type, if-match" + response["Access-Control-Allow-Methods"] = "GET,POST,PUT,PATCH" + response["Access-Control-Allow-Headers"] = "authorization, Content-Type, if-match" response["Access-Control-Expose-Headers"] = "Location" response["Access-Control-Allow-Credentials"] = 'true' response["Accept-Post"] = "application/ld+json"