Pfthb

I have created an app using laravel and vue and hosted on nginx.

All request types works fine when sending Authorization header except for GET.

I have a route GET /reports, I cannot receive Authorization header in my API, but I can see that header is added correctly in networking.

The weird part is if I change my route to POST, PUT, DELETE or PATCH the route (eg. POST /reports) works just fine.

In nginx configuration there is no exclusion for GET request, so I do not understand what could cause this. Also locally it works fine.

My cors configuration:

 $headers = [
 'Access-Control-Allow-Origin' => '*',
 'Access-Control-Allow-Methods' => 'POST, GET, OPTIONS, PUT, DELETE',
 'Access-Control-Allow-Credentials' => 'true',
 'Access-Control-Max-Age' => '86400',
 'Access-Control-Allow-Headers' => 'X-File-Upload, Content-Type, Authorization, Origin, Accept'
 ];

 if ($request->isMethod('OPTIONS'))
 
 return response()->json('"method":"OPTIONS"', 200, $headers);
 

 $response = $next($request);
 $response->headers->set('Access-Control-Allow-Origin', '*');
 $response->headers->set('Access-Control-Allow-Methods', 'POST, GET, OPTIONS, PUT, DELETE');
 $response->headers->set('Access-Control-Allow-Headers', 'Origin, Content-Type, Accept, Authorization');

 return $response;

I also tried changing origin but I have no cors errors whatsoever.

Authorization header does not reach API only on GET request (nginx) Also I have created a topic for my nginx configuration.

What could cause this?