feat(http): make CORS request headers configurable - #473

Open

GabrielFeliciano-ONCWKR wants to merge 1 commit into

redpanda-data:mainfrom

GabrielFeliciano-ONCWKR:feat/configurable-cors-headers

GabrielFeliciano-ONCWKR commented Aug 11, 2026

Problem

Browser JSON requests send Content-Type in Access-Control-Request-Headers. Benthos rejected this header during preflight, returning 403.

Fix

Adds configurable CORS request headers through cors.allowed_headers.

Supports explicit allowed headers.
Supports * for all requested headers.
Applies to native and WASM implementations.
Prevents deployments from requiring proxy-specific CORS workarounds.

Testing

go test ./internal/httpserver ./internal/impl/io


          refactor: allow request headers cors

13feb4d

CLAassistant commented Aug 11, 2026 •

edited

Loading

All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet