oasis-chat 0.1.3 → 0.1.4

package/dist/sw.js

@@ -18,13 +18,23 @@ self.addEventListener('fetch', (event) => {
     // /oasis/... -> /api/...로 변환하여 실제 API 서버에 요청
     const apiPath = url.pathname.replace('/oasis', '/api');
 
-    // 요청을 새로 생성하여 프록시 (body 처리 이슈 방지)
-    const requestInit = {
-      method: event.request.method,
-      headers: event.request.headers,
-      credentials: 'include',
-      mode: 'cors',
-    };
+    // 허용된 헤더만 추출 (CORS 관련 문제 방지)
+    const headers = new Headers();
+    const allowedHeaders = [
+      'accept',
+      'content-type',
+      'authorization',
+      'cookie', // 쿠키 헤더 추가
+      'current-workspace-id',
+      'current-workspace-uuid',
+    ];
+
+    event.request.headers.forEach((value, key) => {
+      const lowerKey = key.toLowerCase();
+      if (allowedHeaders.includes(lowerKey)) {
+        headers.set(key, value);
+      }
+    });
 
     // body가 있는 요청인 경우 (GET, HEAD가 아닌 경우)
     const hasBody =
@@ -40,13 +50,23 @@ self.addEventListener('fetch', (event) => {
           .arrayBuffer()
           .then((body) => {
             return fetch(`${TARGET_API}${apiPath}${url.search}`, {
-              ...requestInit,
+              method: event.request.method,
+              headers: headers,
+              credentials: 'include',
+              mode: 'cors',
               body: body.byteLength > 0 ? body : undefined,
             });
           })
       );
     } else {
-      event.respondWith(fetch(`${TARGET_API}${apiPath}${url.search}`, requestInit));
+      event.respondWith(
+        fetch(`${TARGET_API}${apiPath}${url.search}`, {
+          method: event.request.method,
+          headers: headers,
+          credentials: 'include',
+          mode: 'cors',
+        })
+      );
     }
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis-chat",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Vanilla JS button component with no runtime deps.",
   "license": "MIT",
   "scripts": {