CORS Unauth repsonse

2024-07-25 22:19:38 +02:00
parent 202e89382a
commit 2091bdb4e3
3 changed files with 42 additions and 6 deletions
@@ -23,7 +23,13 @@ class OptAuth implements IMiddleware
      User::getByToken($token);
    } catch (Exception $err) {
      // No user with this token exists
-      Response::response()->httpCode(401)->json(["code" => "Unauthorized", "message" => "Not Authorized"]);
+      Response::response()
+        ->header("Cache-control: no-cache")
+        ->header("Access-Control-Allow-Origin: *")
+        ->header("Access-Control-Allow-Methods: *")
+        ->header("Access-Control-Allow-Headers: *")
+        ->httpCode(401)
+        ->json(["code" => "Unauthorized", "message" => "Not Authorized"]);
    }
  }
 }