revoked access to website for coaches, added web-specific tokens

2026-05-26 15:49:19 +02:00
parent 7671c9f329
commit 2181d1731e
36 changed files with 129 additions and 41 deletions
--- a/api/index.php
+++ b/api/index.php
@ -11,7 +11,7 @@ require_once __DIR__ . '/../lib/validate.php';
 // CORS
 header('Access-Control-Allow-Origin: *');
 header('Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS');
-header('Access-Control-Allow-Headers: Content-Type, Authorization');
+header('Access-Control-Allow-Headers: Content-Type, Authorization, X-QDB-Client');

 if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(204);