search

gbv / paia

Specification of Patrons Account Information API (PAIA)
http://gbv.github.io/paia
15 stars 12 forks source link

Additional header Access-Control-Allow-Headers to allow CORS POST headers #56

Closed nichtich closed 7 years ago

nichtich commented 8 years ago

Add in http://gbv.github.io/paia/paia.html#http-headers in response to an OPTION request:

Access-Control-Allow-Headers: Content-Type, Authorization

or even (not tested yet):

Access-Control-Allow-Headers: Accept, Accept-Language, User-Agent, Content-Type, Authorization

At least Content-Type and Authorization are needed, further tests to require more.

nichtich commented 7 years ago

Specified since pre-release 1.3.2 - tests with implementation is required nevertheless