feat(cors): add Access-Control-Allow-Credentials header for CORS support

2026-06-20 13:00:39 +00:00 · 2026-03-09 00:52:24 +08:00
parent 899f1004a3
commit 1285f6296e
2 changed files with 2 additions and 1 deletions
@@ -54,6 +54,7 @@ function buildCorsHeaders(request: Request): Record<string, string> {
  const allowedOrigin = getAllowedOrigin(request);
  if (allowedOrigin) {
    headers['Access-Control-Allow-Origin'] = allowedOrigin;
+    headers['Access-Control-Allow-Credentials'] = 'true';
    headers['Vary'] = 'Origin';
  }