Accept additional CORS headers

This is needed for Sentry Performance in the frontend, see https://docs.sentry.io/platforms/javascript/performance/instrumentation/automatic-instrumentation/#tracingorigins
dandi · Sep 8, 2022 · c3aba86 · c3aba86
1 parent a1c6406
commit c3aba86
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/dandiapi/settings.py b/dandiapi/settings.py
@@ -10,6 +10,7 @@
     TestingBaseConfiguration,
 )
 from configurations import values
+from corsheaders.defaults import default_headers
 from dandischema.consts import DANDI_SCHEMA_VERSION as _DANDI_SCHEMA_VERSION
 
 
@@ -25,6 +26,9 @@ class DandiMixin(ConfigMixin):
 
     DANDI_ALLOW_LOCALHOST_URLS = False
 
+    # Needed for Sentry Performance to work in frontend
+    CORS_ALLOW_HEADERS = default_headers + ('baggage', 'sentry-trace')
+
     @staticmethod
     def mutate_configuration(configuration: type[ComposedConfiguration]):
         # Install local apps first, to ensure any overridden resources are found first