search

resgateio / resgate

A Realtime API Gateway used with NATS to build REST, real time, and RPC APIs, where all your clients are synchronized seamlessly.
https://resgate.io
MIT License
685 stars 67 forks source link

Access-Control-Allow-Credentials header #181

Closed jirenius closed 3 years ago

jirenius commented 3 years ago

Issue

When a browser makes a CORS requests with credentials set to include, Resgate should include in the response the header:

Access-Control-Allow-Credentials: true

If the header is not included, the browsers will not expose the response to frontend JavaScript code.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials

Notes

jirenius commented 3 years ago

Resolved in #182