Add X-Admin and basic auth header to CORS allowed headers in http_api

diff --git a/src/mod_http_api.erl b/src/mod_http_api.erl
index 95a4ad51ef81e24e0f98a2a9a06ba566884c7ce0..e2f6cc2400dd92649b574a242d12cf8c5fcc4426 100644 (file)
--- a/src/mod_http_api.erl
+++ b/src/mod_http_api.erl
@@ -101,7 +101,7 @@
 
 -define(AC_ALLOW_HEADERS,
         {<<"Access-Control-Allow-Headers">>,
-         <<"Content-Type">>}).
+         <<"Content-Type, Authorization, X-Admin">>}).
 
 -define(AC_MAX_AGE,
         {<<"Access-Control-Max-Age">>, <<"86400">>}).