also allow authorization header

1 files changed, 1 insertions, 0 deletions

diff --git a/external/newsapi.php b/external/newsapi.php
index 7e8d901d0..07c2db43d 100644
--- a/external/newsapi.php
+++ b/external/newsapi.php
@@ -82,6 +82,7 @@ class NewsAPI extends Controller {
 		$response->addHeader('Access-Control-Allow-Origin', '*');
 		$response->addHeader('Access-Control-Allow-Methods', 'PUT, POST, GET, DELETE');
 		$response->addHeader('Access-Control-Allow-Credentials', 'true');
+		$response->addHeader('Access-Control-Allow-Headers', 'Authorization');
 		$response->addHeader('Access-Control-Max-Age', '1728000');
 		return $response;
 	}