From eea92c5ac5c081b3e77dc293dbed06cde28dd538 Mon Sep 17 00:00:00 2001
From: Juliusz Chroboczek <jch@irif.fr>
Date: Tue, 7 Apr 2026 17:40:16 +0200
Subject: [PATCH] Fix CORS headers for key handler.

---
 webserver/api.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webserver/api.go b/webserver/api.go
index 13f4910..dc7e91f 100644
--- a/webserver/api.go
+++ b/webserver/api.go
@@ -501,7 +501,7 @@ type jwkset = struct {
 }
 
 func keysHandler(w http.ResponseWriter, r *http.Request, g string) {
-	if apiCORS(w, r, "HEAD, GET") {
+	if apiCORS(w, r, "PUT, DELETE") {
 		return
 	}
 	if !checkAdmin(w, r) {