Add allowed headers

axonivy-market · Jul 18, 2024 · 044edcf · 044edcf
1 parent e74c899
commit 044edcf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/marketplace-service/src/main/java/com/axonivy/market/config/WebConfig.java b/marketplace-service/src/main/java/com/axonivy/market/config/WebConfig.java
@@ -11,7 +11,7 @@ public class WebConfig implements WebMvcConfigurer {
 
   private static final String[] EXCLUDE_PATHS = { "/", "/swagger-ui/**", "/api-docs/**" };
   private static final String[] ALLOWED_HEADERS = { "Accept-Language", "Content-Type", "Authorization",
-      "X-Requested-By", "x-requested-with", "X-Forwarded-Host" };
+      "X-Requested-By", "x-requested-with", "X-Forwarded-Host", "x-xsrf-token" };
   private static final String[] ALLOWED_METHODS = { "GET", "POST", "PUT", "DELETE", "OPTIONS" };
 
   private final MarketHeaderInterceptor headerInterceptor;