Access Control Allow Headers

I'm calling my API endpoints from my React web app, and Firefox is giving me this warning:

Cross-Origin Request Warning: The Same Origin Policy will disallow reading the remote resource at [Xano Endpoint URL] soon. (Reason: When the Access-Control-Allow-Headers is *, the Authorization header is not covered. To include the Authorization header, it must be explicitly listed in CORS header Access-Control-Allow-Headers).

Is making a change to address this on the roadmap? I'm not sure how 'soon' this will stop working.

1 reply