zyycnandClaude 93ab75e42b fix(api): stop CORS assembly from panicking on configured origins ...

Replace the wildcard allow_headers with an explicit whitelist (authorization, content-type, x-api-key, and the configured request-id header): tower-http asserts against wildcard headers combined with allow_credentials, so any non-empty cors_allowed_origins previously panicked inside initialize() before the server could listen. Add a preflight assembly test covering a configured origin.

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-26 19:57:13 +08:00

..

responses

refactor(gateway): restore provider-owned protocol boundaries

2026-07-25 00:33:12 +08:00

auth.rs

refactor: migrate to multi-provider gateway architecture

2026-07-25 00:33:11 +08:00

error.rs

fix(gateway): restore transparent request semantics

2026-07-25 00:33:12 +08:00

mod.rs

fix(api): stop CORS assembly from panicking on configured origins

2026-07-26 19:57:13 +08:00

models.rs

fix(api): stop CORS assembly from panicking on configured origins

2026-07-26 19:57:13 +08:00

router.rs

fix(api): stop CORS assembly from panicking on configured origins

2026-07-26 19:57:13 +08:00