Feat: Add Supabase auth headers to api CORS policy (#824)

ben-fornefeld · web-flow · commit 856dc708c62e · 2025-06-24T19:15:48.000+02:00
diff --git a/packages/api/main.go b/packages/api/main.go
@@ -97,6 +97,9 @@ func NewGinServer(ctx context.Context, tel *telemetry.Client, logger *zap.Logger
 		// API Key header
 		"Authorization",
 		"X-API-Key",
+		// Supabase headers
+		"X-Supabase-Token",
+		"X-Supabase-Team",
 		// Custom headers sent from SDK
 		"browser",
 		"lang",
