From 4323e8e6838a724170343379d36c7d64736250fc Mon Sep 17 00:00:00 2001
From: Frank Schubert <fronk@fronk.at>
Date: Tue, 8 Nov 2022 19:27:14 +0100
Subject: [PATCH] Fixed cors headers

---
 lib/mvcfronk/mfBase/mfBaseApicontroller.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/mvcfronk/mfBase/mfBaseApicontroller.php b/lib/mvcfronk/mfBase/mfBaseApicontroller.php
index 1b6c50c0d..1430d1867 100644
--- a/lib/mvcfronk/mfBase/mfBaseApicontroller.php
+++ b/lib/mvcfronk/mfBase/mfBaseApicontroller.php
@@ -47,6 +47,9 @@ class mfBaseApicontroller {
     // allow all origins
     if($this->http_method == "OPTIONS") {
       // dont execute route, OPTIONS only requires CORS headers
+      header("Access-Control-Allow-Methods: GET,POST,OPTIONS");
+      header("Access-Control-Allow-Headers: X-Api-Key");
+      
       if(preg_match('#^(https?)://(.+)(:\d+)?$#i', $this->headers['origin'], $m)) {
         $origin_proto = $m[1];
         $origin_hostname = $m[2];