apache / shenyu

Apache ShenYu is a Java native API Gateway for service proxy, protocol conversion and API governance.
https://shenyu.apache.org/
Apache License 2.0
8.42k stars 2.92k forks source link

[BUG] no cors header shenyu-authorization #5649

Closed initialdmg closed 1 month ago

initialdmg commented 1 month ago

Is there an existing issue for this?

Current Behavior

Follow Sign plugin's configuration doc v2, puts the Token value into the request header ShenYu-Authorization. OPTIONS Response ACAH values does not have this one, which causes CORS error.

image

Trying to fix in #5627 .

Expected Behavior

Gateway response preflight requests correctly.

Steps To Reproduce

Config token in request header ShenYu-Authorization and use gateway in a CORS environment.

Environment

ShenYu version(s): latest

Debug logs

No response

Anything else?

No response