Allow Authorization header in CORS

Author: TheQuantifier

api/src/app.js

@@ -65,6 +65,7 @@ const corsOptions = {
   },
   credentials: true,
   methods: ["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
+  allowedHeaders: ["Content-Type", "Authorization"],
 };
 
 // Main CORS handler