Allow creds

osuAkatsuki · Aug 8, 2024 · 7a12073 · 7a12073
1 parent b46e7e6
commit 7a12073
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/sites-enabled/next.conf b/sites-enabled/next.conf
@@ -34,12 +34,13 @@ server {
     }
 
     location ~ /api/v1/(authenticate|users/(\d+)) {
-        add_header 'Access-Control-Allow-Origin' $cors_allowed_origin always;
-        add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, PATCH, DELETE, OPTIONS';
-        add_header 'Access-Control-Allow-Headers' '*';
-        # if ($request_method = OPTIONS) {
-        #     return 200;
-        # }
+        if ($request_method = OPTIONS) {
+            add_header 'Access-Control-Allow-Origin' $cors_allowed_origin always;
+            add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, PATCH, DELETE, OPTIONS';
+            add_header 'Access-Control-Allow-Headers' '*';
+            add_header 'Access-Control-Allow-Credentials' 'true';
+            return 200;
+        }
 
         limit_req zone=users_zone burst=10 nodelay;
         limit_req_status 429;