fix: allows CORS for keyvalue API (medplum#4476)

dillonstreator · May 7, 2024 · 5e1b9a6 · 5e1b9a6
1 parent 932e2ec
commit 5e1b9a6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/server/src/cors.ts b/packages/server/src/cors.ts
@@ -37,7 +37,7 @@ function isOriginAllowed(origin: string | undefined): boolean {
  return false;
 }
 
-const prefixes = ['/.well-known/', '/admin/', '/auth/', '/email/', '/fhir/', '/fhircast/', '/oauth2/'];
+const prefixes = ['/.well-known/', '/admin/', '/auth/', '/email/', '/fhir/', '/fhircast/', '/oauth2/', '/keyvalue/'];
 
 function isPathAllowed(path: string): boolean {
  return prefixes.some((prefix) => path.startsWith(prefix));