From 812298e5ad2053d4b37e084b258083e61cdd1341 Mon Sep 17 00:00:00 2001
From: Paul Brinkmeier <brinkmeier@meqo.de>
Date: Sun, 17 May 2026 20:27:46 +0200
Subject: [PATCH] Add CORS header for Gitea OAuth

---
 docker/docker/caddy/Caddyfile | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/docker/docker/caddy/Caddyfile b/docker/docker/caddy/Caddyfile
index e5fcb87..713de3d 100644
--- a/docker/docker/caddy/Caddyfile
+++ b/docker/docker/caddy/Caddyfile
@@ -46,6 +46,20 @@ pad.pbrinkmeier.de {
 }
 
 git.pbrinkmeier.de {
+    # Allow apps to requests tokens 'n stuff
+    @oauth path /login/oauth/*
+    header @oauth {
+        Access-Control-Allow-Origin "*"
+        Access-Control-Allow-Methods "GET, POST, OPTIONS"
+        Access-Control-Allow-Headers "Content-Type, Authorization"
+    }
+
+    @oauth_preflight {
+        path /login/oauth/*
+        method OPTIONS
+    }
+    respond @oauth_preflight 204
+
     reverse_proxy gitea:3000
 }