Fix CORS preflight: allow all headers

Author: SurenNorekyanCodesignal

src/main.ts

@@ -21,8 +21,10 @@ async function bootstrap() {
       return callback(new Error(`CORS blocked for origin: ${origin}`), false);
     },
     credentials: true,
-    methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
-    allowedHeaders: ['Content-Type', 'Authorization'],
+    methods: 'GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS',
+    allowedHeaders: '*', // <--- important change
+    preflightContinue: false,
+    optionsSuccessStatus: 204,
   });
 
   app.useGlobalPipes(