Just when you think you understand how CORS works...

Author: RobFaustLZ

src/worker/index.ts

@@ -38,7 +38,7 @@ const app = new Hono<{ Bindings: Env }>();
 app.use("/api/*", (c, next) => {
     return cors({
         origin: c.env.LZ_ALLOWED_ORIGINS,
-        allowHeaders: ['Authorization','X-LZ-AppVersion'],
+        allowHeaders: [],
         allowMethods: ['GET', 'HEAD', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
 
         /* CORS-safelisted response headers: