chore: updated CORS config

Goldziher · Nov 27, 2023 · d5ea5d3 · d5ea5d3
1 parent b3c10c0
commit d5ea5d3
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/shared/go/router/router.go b/shared/go/router/router.go
@@ -25,11 +25,12 @@ func New(opts Options) chi.Router {
 	if opts.Environment != "test" {
 		router.Use(chimiddleware.RealIP)
 		router.Use(cors.Handler(cors.Options{
-			AllowedOrigins: []string{"*"},
-			AllowedMethods: []string{"GET", "POST", "PATCH", "DELETE", "OPTIONS"},
-			AllowedHeaders: []string{"*"},
-			MaxAge:         3600,
-			Debug:          opts.Environment == "development",
+			AllowCredentials: true,
+			AllowedHeaders:   []string{"X-Request-Id", "Authorization", "Content-Type", "Accept"},
+			AllowedMethods:   []string{"GET", "POST", "PATCH", "DELETE", "OPTIONS"},
+			AllowedOrigins:   []string{"https://*", "http://*"},
+			Debug:            opts.Environment == "development",
+			MaxAge:           3600,
 		}))
 		router.Use(httplog.RequestLogger(log.With().Str("service", opts.ServiceName).Logger()))
 		router.Use(chimiddleware.Heartbeat("/health-check"))