fix: allow all methods in CORS

2023-05-25 00:33:54 +02:00 · 2023-05-25 00:33:54 +02:00 · 5bac691d15
parent 8f8daaa331
commit 5bac691d15
1 changed files with 3 additions and 2 deletions
--- a/backend/server/server.go
+++ b/backend/server/server.go
@ -52,7 +52,8 @@ func New() (*Server, error) {
 	// add CORS
 	s.Router.Use(cors.Handler(cors.Options{
 		AllowedOrigins: []string{"https://*", "http://*"},
-		AllowedMethods:   []string{"HEAD", "GET"},
+		// Allow all methods normally used by the API
+		AllowedMethods:   []string{"HEAD", "GET", "POST", "PATCH", "DELETE"},
 		AllowedHeaders:   []string{"Accept", "Authorization", "Content-Type"},
 		AllowCredentials: false,
 		MaxAge:           300,