Allow DPoP header

This commit is contained in:
Willem Dantuma 2022-10-10 18:10:11 +02:00
parent 3e75107c9c
commit 96ca17675f

View file

@ -65,7 +65,7 @@ func CreateRouter(o OpenIDProvider, interceptors ...HttpInterceptor) *mux.Router
router := mux.NewRouter()
router.Use(handlers.CORS(
handlers.AllowCredentials(),
handlers.AllowedHeaders([]string{"authorization", "content-type"}),
handlers.AllowedHeaders([]string{"authorization", "content-type", "dpop"}),
handlers.AllowedOriginValidator(allowAllOrigins),
))
router.HandleFunc(healthEndpoint, healthHandler)