From 6203f98e93fa8df9dbf9d614f2d991cebbd0b3de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torsten=20L=C3=BCcke?= <privat@torsten-hettstedt.de>
Date: Tue, 13 Apr 2021 12:43:31 +0200
Subject: [PATCH] Alle notwendigen Header werden mitgeliefert.

---
 api/src/Middleware/OriginAccessControlHandler.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/api/src/Middleware/OriginAccessControlHandler.php b/api/src/Middleware/OriginAccessControlHandler.php
index 215a019..a62de79 100644
--- a/api/src/Middleware/OriginAccessControlHandler.php
+++ b/api/src/Middleware/OriginAccessControlHandler.php
@@ -35,12 +35,12 @@ class OriginAccessControlHandler implements MiddlewareInterface
         $requestHeaders = $request->getHeaderLine('Access-Control-Request-Headers');
 
         if ($this->testRoute($request)) {
+            //                     Stunden   Minuten   Sekunden
+            $accessControlMaxAge = 24      * 60      * 60;
             $response = $response->withHeader('Access-Control-Allow-Origin', $this->buildOrigin($request));
             $response = $response->withHeader('Access-Control-Allow-Methods', implode(',', $methods));
             $response = $response->withHeader('Access-Control-Allow-Headers', $requestHeaders);
-
-            // Optional: Allow Ajax CORS requests with Authorization header
-            $response = $response->withHeader('Access-Control-Allow-Credentials', 'true');
+            $response = $response->withHeader('Access-Control-Max-Age', (string)$accessControlMaxAge);
         }
         return $response;
     }