jointakahe / takahe

An ActivityPub/Fediverse server
BSD 3-Clause "New" or "Revised" License
1.12k stars 86 forks source link

add Idempotency-Key to allowed CORS header #618

Closed alphatownsman closed 1 year ago

alphatownsman commented 1 year ago

It's used by Mastodon and Pleroma

Idempotency-Key Provide this header with any arbitrary string to prevent duplicate submissions of the same status. Consider using a hash or UUID generated client-side. Idempotency keys are stored for up to 1 hour.

Some web client will always send it regardless of server software, so I think it's reasonable to at least accept it even not implement it yet.

andrewgodwin commented 1 year ago

Makes sense - thanks!