feat(cors): add Access-Control-Allow-Credentials header for CORS support

src/utils/response.ts

@@ -54,6 +54,7 @@ function buildCorsHeaders(request: Request): Record<string, string> {
   const allowedOrigin = getAllowedOrigin(request);
   if (allowedOrigin) {
     headers['Access-Control-Allow-Origin'] = allowedOrigin;
+    headers['Access-Control-Allow-Credentials'] = 'true';
     headers['Vary'] = 'Origin';
   }
 

wrangler.kv.toml

@@ -23,4 +23,4 @@ binding = "ATTACHMENTS_KV"
 
 [[migrations]]
 tag = "v1-notifications-hub"
-new_sqlite_classes = ["NotificationsHub"]
+new_sqlite_classes = [ "NotificationsHub" ]