From 194b8898736f3a486654d46a6c1608faf79c2973 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?nicole=20miko=C5=82ajczyk?= Date: Wed, 6 May 2026 12:41:25 +0200 Subject: [PATCH] Expose `mastodon-async-refresh` response header through CORS (#38914) --- config/initializers/cors.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/initializers/cors.rb b/config/initializers/cors.rb index 476f1fb07a..6d4a832ee8 100644 --- a/config/initializers/cors.rb +++ b/config/initializers/cors.rb @@ -19,7 +19,7 @@ Rails.application.config.middleware.insert_before 0, Rack::Cors do resource '/users/:username' end resource '/api/*', - expose: %w(Link X-RateLimit-Reset X-RateLimit-Limit X-RateLimit-Remaining X-Request-Id), + expose: %w(Link Mastodon-Async-Refresh X-RateLimit-Reset X-RateLimit-Limit X-RateLimit-Remaining X-Request-Id), methods: %i(post put delete get patch options) resource '/oauth/token', methods: [:post] resource '/oauth/revoke', methods: [:post]