Merge pull request #593 from Rdataflow/fix--cors-allow-headers

fix: update Access-Control-Allow-Headers for edge using `Accept-Language` header longer 128

Author: boecklic

app/middleware/cors.py

@@ -33,6 +33,6 @@ def __call__(self, request):
         if request.path in (f'/{STAC_BASE}/v0.9/search', f'/{STAC_BASE}/v1/search'):
             allow_methods.append('POST')
         response['Access-Control-Allow-Methods'] = ','.join(allow_methods)
-        response['Access-Control-Allow-Headers'] = 'Content-Type,Accept'
+        response['Access-Control-Allow-Headers'] = 'Content-Type,Accept,Accept-Language'
 
         return response

app/tests/tests_09/base_test.py

@@ -129,7 +129,7 @@ def assertLocationHeader(self, expected_path, response):  # pylint: disable=inva
 
     def assertCors(self, response):  # pylint: disable=invalid-name
         for header, value in {
-            'Access-Control-Allow-Headers': 'Content-Type,Accept',
+            'Access-Control-Allow-Headers': 'Content-Type,Accept,Accept-Language',
             'Access-Control-Allow-Methods': 'GET,HEAD',
             'Access-Control-Allow-Origin': '*'
         }.items():

app/tests/tests_09/test_generic_api.py

@@ -684,7 +684,7 @@ def test_get_cors_header(self):
 
                 self.assertEqual(
                     response['Access-Control-Allow-Headers'],
-                    'Content-Type,Accept',
+                    'Content-Type,Accept,Accept-Language',
                     msg='Wrong CORS allow-Headers value'
                 )
 
@@ -719,6 +719,6 @@ def test_get_cors_header_search(self):
 
         self.assertEqual(
             response['Access-Control-Allow-Headers'],
-            'Content-Type,Accept',
+            'Content-Type,Accept,Accept-Language',
             msg='Wrong CORS allow-Headers value'
         )

app/tests/tests_10/base_test.py

@@ -130,7 +130,7 @@ def assertLocationHeader(self, expected_path, response):  # pylint: disable=inva
 
     def assertCors(self, response):  # pylint: disable=invalid-name
         for header, value in {
-            'Access-Control-Allow-Headers': 'Content-Type,Accept',
+            'Access-Control-Allow-Headers': 'Content-Type,Accept,Accept-Language',
             'Access-Control-Allow-Methods': 'GET,HEAD',
             'Access-Control-Allow-Origin': '*'
         }.items():

app/tests/tests_10/test_generic_api.py

@@ -677,7 +677,7 @@ def test_get_cors_header(self):
 
                 self.assertEqual(
                     response['Access-Control-Allow-Headers'],
-                    'Content-Type,Accept',
+                    'Content-Type,Accept,Accept-Language',
                     msg='Wrong CORS allow-Headers value'
                 )
 
@@ -712,6 +712,6 @@ def test_get_cors_header_search(self):
 
         self.assertEqual(
             response['Access-Control-Allow-Headers'],
-            'Content-Type,Accept',
+            'Content-Type,Accept,Accept-Language',
             msg='Wrong CORS allow-Headers value'
         )