Correctly set Access-Control-Allow-Headers

This commit is contained in:
nicolas.dorier 2019-02-02 15:51:38 +09:00
parent c84c0ac64d
commit 3725a5b644

View file

@ -42,8 +42,10 @@ namespace BTCPayServer.Hosting
{
httpContext.Response.StatusCode = 200;
httpContext.Response.SetHeader("Access-Control-Allow-Origin", "*");
httpContext.Response.SetHeader("Access-Control-Allow-Headers", "*");
httpContext.Response.SetHeader("Access-Control-Allow-Methods", "*");
if (httpContext.Request.Headers.ContainsKey("Access-Control-Request-Headers"))
{
httpContext.Response.SetHeader("Access-Control-Allow-Headers", httpContext.Request.Headers["Access-Control-Request-Headers"].FirstOrDefault());
}
return; // We bypass MVC completely
}
httpContext.SetIsBitpayAPI(isBitpayAPI);