From 044edcf7f56bdc1ff08055c9a47043a28904af80 Mon Sep 17 00:00:00 2001
From: Khanh Nguyen <khanh.nguyenduy@axonactive.com>
Date: Thu, 18 Jul 2024 16:43:09 +0700
Subject: [PATCH] Add allowed headers

---
 .../src/main/java/com/axonivy/market/config/WebConfig.java      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/marketplace-service/src/main/java/com/axonivy/market/config/WebConfig.java b/marketplace-service/src/main/java/com/axonivy/market/config/WebConfig.java
index aa9acd556..a781aa8ea 100644
--- a/marketplace-service/src/main/java/com/axonivy/market/config/WebConfig.java
+++ b/marketplace-service/src/main/java/com/axonivy/market/config/WebConfig.java
@@ -11,7 +11,7 @@ public class WebConfig implements WebMvcConfigurer {
 
   private static final String[] EXCLUDE_PATHS = { "/", "/swagger-ui/**", "/api-docs/**" };
   private static final String[] ALLOWED_HEADERS = { "Accept-Language", "Content-Type", "Authorization",
-      "X-Requested-By", "x-requested-with", "X-Forwarded-Host" };
+      "X-Requested-By", "x-requested-with", "X-Forwarded-Host", "x-xsrf-token" };
   private static final String[] ALLOWED_METHODS = { "GET", "POST", "PUT", "DELETE", "OPTIONS" };
 
   private final MarketHeaderInterceptor headerInterceptor;