From cb137fe0c7beaa6c107296490fee80d93ae644ec Mon Sep 17 00:00:00 2001
From: shuaiplus <2327005759@qq.com>
Date: Mon, 9 Mar 2026 00:52:24 +0800
Subject: [PATCH] feat(cors): add Access-Control-Allow-Credentials header for
 CORS support

---
 src/utils/response.ts | 1 +
 wrangler.kv.toml      | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/utils/response.ts b/src/utils/response.ts
index 26e787c..625dead 100644
--- a/src/utils/response.ts
+++ b/src/utils/response.ts
@@ -54,6 +54,7 @@ function buildCorsHeaders(request: Request): Record<string, string> {
   const allowedOrigin = getAllowedOrigin(request);
   if (allowedOrigin) {
     headers['Access-Control-Allow-Origin'] = allowedOrigin;
+    headers['Access-Control-Allow-Credentials'] = 'true';
     headers['Vary'] = 'Origin';
   }
 
diff --git a/wrangler.kv.toml b/wrangler.kv.toml
index 47f6c62..cf837cb 100644
--- a/wrangler.kv.toml
+++ b/wrangler.kv.toml
@@ -23,4 +23,4 @@ binding = "ATTACHMENTS_KV"
 
 [[migrations]]
 tag = "v1-notifications-hub"
-new_sqlite_classes = ["NotificationsHub"]
+new_sqlite_classes = [ "NotificationsHub" ]