feat: add AllowMethods and allow headers (#145)

- 得写清楚，否则带 credentials 的请求会炸
petercat-ai · Jun 10, 2024 · f5fc4bb · f5fc4bb
2 parents 8618ffa + 7bf1bec
commit f5fc4bb
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/server/main.py b/server/main.py
@@ -38,8 +38,8 @@
     CORSMiddleware,
     allow_origins=cors_origins, 
     allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"], 
+    allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+    allow_headers=["Content-Type", "Authorization"], 
 )
 
 app.include_router(health_checker.router)