9187aa669d
The Authorization header needs to be allowed when doing CORS because otherwise /userinfo can't work. It isn't one of the headers explicitly allowed by default by Gorilla, so we have to call handlers.AllowedHeaders() to specify it. Issues: #1532 Signed-off-by: Alastair Houghton <alastair@alastairs-place.net> |
||
|---|---|---|
| .. | ||
| internal | ||
| api.go | ||
| api_test.go | ||
| deviceflowhandlers.go | ||
| deviceflowhandlers_test.go | ||
| doc.go | ||
| handlers.go | ||
| handlers_test.go | ||
| oauth2.go | ||
| oauth2_test.go | ||
| rotation.go | ||
| rotation_test.go | ||
| server.go | ||
| server_test.go | ||
| templates.go | ||
| templates_test.go | ||