From b3316e3755219d6c44dcbee0cc54a868d29fb6e7 Mon Sep 17 00:00:00 2001 From: "yunlu.wen" Date: Tue, 21 Oct 2025 10:20:16 +0800 Subject: [PATCH] add cors header --- api/extensions/ext_blueprints.py | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/api/extensions/ext_blueprints.py b/api/extensions/ext_blueprints.py index 52fef4929f..6027833419 100644 --- a/api/extensions/ext_blueprints.py +++ b/api/extensions/ext_blueprints.py @@ -1,5 +1,5 @@ from configs import dify_config -from constants import HEADER_NAME_APP_CODE, HEADER_NAME_CSRF_TOKEN +from constants import HEADER_NAME_APP_CODE, HEADER_NAME_CSRF_TOKEN, HEADER_NAME_PASSPORT from dify_app import DifyApp @@ -26,7 +26,13 @@ def init_app(app: DifyApp): web_bp, resources={r"/*": {"origins": dify_config.WEB_API_CORS_ALLOW_ORIGINS}}, supports_credentials=True, - allow_headers=["Content-Type", "Authorization", HEADER_NAME_APP_CODE, HEADER_NAME_CSRF_TOKEN], + allow_headers=[ + "Content-Type", + "Authorization", + HEADER_NAME_APP_CODE, + HEADER_NAME_CSRF_TOKEN, + HEADER_NAME_PASSPORT + ], methods=["GET", "PUT", "POST", "DELETE", "OPTIONS", "PATCH"], expose_headers=["X-Version", "X-Env"], )