From 2f4f8164df2ed625c3e13f7a35ea3d17e47b2956 Mon Sep 17 00:00:00 2001
From: nihonium <nihonium@nekoea.red>
Date: Thu, 4 Dec 2025 09:03:51 +0300
Subject: [PATCH] feat: CORS X-XSRF-TOKEN

---
 modules/backend/main.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/backend/main.go b/modules/backend/main.go
index 37dcc7b..24325eb 100644
--- a/modules/backend/main.go
+++ b/modules/backend/main.go
@@ -66,7 +66,7 @@ func main() {
 		// AllowOrigins:     []string{AppConfig.ServiceAddress},
 		AllowOrigins:     []string{"*"},
 		AllowMethods:     []string{"GET", "POST", "PUT", "DELETE", "PATCH"},
-		AllowHeaders:     []string{"Origin", "Content-Type", "Accept"},
+		AllowHeaders:     []string{"Origin", "Content-Type", "Accept", "X-XSRF-TOKEN"},
 		ExposeHeaders:    []string{"Content-Length"},
 		AllowCredentials: true,
 		MaxAge:           12 * time.Hour,