app/common/http/middleware/LikeAdminAllowMiddleware.php

@@ -37,7 +37,7 @@ class LikeAdminAllowMiddleware
     public function handle($request, Closure $next, ?array $header = [])
     {
         header('Access-Control-Allow-Origin: *');
-        header("Access-Control-Allow-Headers: Authorization, Sec-Fetch-Mode, DNT, X-Mx-ReqToken, Keep-Alive, User-Agent, If-Match, If-None-Match, If-Unmodified-Since, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Accept-Language, Origin, Accept-Encoding,Access-Token,token,version,appid,url,timestamp,sign");
+        header("Access-Control-Allow-Headers: *");
         header('Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, post');
         header('Access-Control-Max-Age: 1728000');
         header('Access-Control-Allow-Credentials:true');