set cors headers for /api/event

vinceanalytics · Feb 11, 2024 · 5d0108f · 5d0108f
1 parent 6728b5b
commit 5d0108f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/api/events.go b/api/events.go
@@ -11,6 +11,9 @@ import (
 
 func ReceiveEvent(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("X-Content-Type-Options", "nosniff")
+	w.Header().Set("Access-Control-Allow-Origin", r.Header.Get("Origin"))
+	w.Header().Set("Access-Control-Allow-Methods", http.MethodPost)
+	w.Header().Add("Access-Control-Allow-Headers", "Content-Type")
 	ctx := r.Context()
 	xg := guard.Get(ctx)
 	if !xg.Allow() {