Add Access-Control-Allow-Headers

Author: hippobyte

features/cors.feature

@@ -10,7 +10,7 @@ Feature: CORS
       """
       Access-Control-Allow-Origin: tus-server.org
       Access-Control-Allow-Methods: POST, GET, HEAD, PATCH, DELETE, OPTIONS
-      Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Upload-Length, Upload-Offset, Tus-Resumable, Upload-Metadata, Upload-Defer-Length, Upload-Concat
+      Access-Control-Allow-Headers: Authorization, Origin, X-Requested-With, X-Request-ID, X-HTTP-Method-Override, Content-Type, Upload-Length, Upload-Offset, Tus-Resumable, Upload-Metadata, Upload-Defer-Length, Upload-Concat
       Access-Control-Max-Age: 86400
       """
 

lib/tus/server.rb

@@ -396,7 +396,7 @@ def handle_cors!
 
       if request.options?
         response.headers["Access-Control-Allow-Methods"] = "POST, GET, HEAD, PATCH, DELETE, OPTIONS"
-        response.headers["Access-Control-Allow-Headers"] = "Origin, X-Requested-With, Content-Type, Upload-Length, Upload-Offset, Tus-Resumable, Upload-Metadata, Upload-Defer-Length, Upload-Concat"
+        response.headers["Access-Control-Allow-Headers"] = "Authorization, Origin, X-Requested-With, X-Request-ID, X-HTTP-Method-Override, Content-Type, Upload-Length, Upload-Offset, Tus-Resumable, Upload-Metadata, Upload-Defer-Length, Upload-Concat"
         response.headers["Access-Control-Max-Age"]       = "86400"
       else
         response.headers["Access-Control-Expose-Headers"] = "Upload-Offset, Location, Upload-Length, Tus-Version, Tus-Resumable, Tus-Max-Size, Tus-Extension, Upload-Metadata, Upload-Defer-Length, Upload-Concat"