From 946fa68430533796f68a499131d6f81b8bf78a0b Mon Sep 17 00:00:00 2001
From: Caleb Barnes <caleb.d.barnes@gmail.com>
Date: Wed, 24 Jan 2024 04:45:57 -0800
Subject: [PATCH] fix empty body for schema OPTIONS requests

---
 wordpress/plugins/nextwp-toolkit/nextwp-toolkit.php |  2 +-
 wordpress/plugins/nextwp-toolkit/wp/cors.php        | 10 +++++++---
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/wordpress/plugins/nextwp-toolkit/nextwp-toolkit.php b/wordpress/plugins/nextwp-toolkit/nextwp-toolkit.php
index 5e33497..2e95b0a 100644
--- a/wordpress/plugins/nextwp-toolkit/nextwp-toolkit.php
+++ b/wordpress/plugins/nextwp-toolkit/nextwp-toolkit.php
@@ -3,7 +3,7 @@
 * Plugin Name: NextWP - Headless Toolkit
 * Plugin URI: https://www.nextwp.org/packages/wordpress/nextwp-toolkit-plugin
 * Description: A toolkit for headless Wordpress sites built with NextWP
-* Version: 1.1.3
+* Version: 1.1.4
 * Author: Caleb Barnes
 * Author URI: https://github.com/CalebBarnes
 */
diff --git a/wordpress/plugins/nextwp-toolkit/wp/cors.php b/wordpress/plugins/nextwp-toolkit/wp/cors.php
index 02ebdd6..4268a5e 100644
--- a/wordpress/plugins/nextwp-toolkit/wp/cors.php
+++ b/wordpress/plugins/nextwp-toolkit/wp/cors.php
@@ -1,14 +1,18 @@
 <?php
 
 add_action('init', 'handle_preflight');
-function handle_preflight() {
+function handle_preflight()
+{
     // This is for CORS when using the WP REST API, especially when submitting Gravity Forms
     header("Access-Control-Allow-Origin: *");
     header("Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE");
     header("Access-Control-Allow-Headers: Origin, Content-Type, Accept");
 
-    if('OPTIONS' == $_SERVER['REQUEST_METHOD']) {
+    // Check for CORS preflight request headers
+    if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD']) || isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS'])) {
+        // It's a CORS preflight request, handle accordingly
         status_header(200);
         exit();
     }
-}
\ No newline at end of file
+    // Not a preflight request, let WordPress handle it (possibly a schema request)
+}