efrilmandClaude Opus 5.5 4b7eddbd3e fix(cors): allow the Idempotency-Key header ...

The EnakGame client runs at its game_url, another origin than the API, so the
browser asks before POST /customer/enakgame/sessions. Idempotency-Key was not in
Access-Control-Allow-Headers, so the preflight refused it and a play could not
start. X-Idempotency-Key, the older name the backend also reads, is allowed too.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 22:58:02 +07:00

..

auth_middleware.go

feat: update profit sharing

2026-10-04 21:54:13 +07:00

auth_processor.go

init

2025-07-18 20:10:29 +07:00

context.go

init

2025-07-18 20:10:29 +07:00

correlation_id.go

init

2025-07-18 20:10:29 +07:00

cors.go

fix(cors): allow the Idempotency-Key header

2026-10-09 22:58:02 +07:00

customer_auth_middleware.go

campaign

2025-09-18 02:01:50 +07:00

idempotency.go

feat: implement idempotency key for critical API endpoints

2026-06-04 00:49:45 +07:00

json.go

init

2025-07-18 20:10:29 +07:00

logging.go

init

2025-07-18 20:10:29 +07:00

rate_limit.go

init

2025-07-18 20:10:29 +07:00

recover.go

init

2025-07-18 20:10:29 +07:00

stat_logger.go

init

2025-07-18 20:10:29 +07:00

user_id_resolver.go

init

2025-07-18 20:10:29 +07:00

user_processor.go

init

2025-07-18 20:10:29 +07:00