Add Authorization header to CORS configuration
<cors>
<enabled>true</enabled>
<allowedOrigins>*</allowedOrigins>
- <allowedHeaders></allowedHeaders>
+ <!-- comma separated values-->
+ <allowedHeaders>Authorization</allowedHeaders>
</cors>
</api>
</apis>
