Mohd Quamar TyagiandChris Lu e73c23a4ee fix(s3): set Access-Control-Allow-Credentials on CORS responses (#11886) ...

* fix(s3): set Access-Control-Allow-Credentials on CORS responses (fixes #11885)

* fix(s3): expand wildcard exposed headers for credentialed CORS responses

* fix(s3): keep wildcard in exposed headers for non-credentialed CORS requests

* fix(s3): expose x-amz-tagging-count on credentialed CORS responses

---------

Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>

2026-10-21 13:10:49 -07:00

..

cors_test.go

fix(s3): set Access-Control-Allow-Credentials on CORS responses (#11886)

2026-10-21 13:10:49 -07:00

cors.go

fix(s3): set Access-Control-Allow-Credentials on CORS responses (#11886)

2026-10-21 13:10:49 -07:00

middleware_nonexistent_bucket_test.go

Fix CORS headers not applied to non-existent bucket responses (#8070)

2026-01-20 16:15:46 -08:00

middleware_test.go

go fmt

2026-01-28 14:34:07 -08:00

middleware.go

fix(s3api): missing Vary: Origin header on non-CORS and OPTIONS requests (#8072)

2026-01-21 14:04:57 -08:00