From c44689a7e7fefc5fb7a8aa58b0991b43ce3090b8 Mon Sep 17 00:00:00 2001
From: Daniel Supernault <danielsupernault@gmail.com>
Date: Mon, 24 Aug 2026 03:05:55 -0600
Subject: [PATCH] Update cors config

---
 config/cors.php | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/config/cors.php b/config/cors.php
index 1e81a015c..ef8fa50f5 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -50,8 +50,7 @@ return [
     /*
      * Sets the Access-Control-Expose-Headers response header with these headers.
      */
-    // TODO: Add support for rate-limit related headers
-    'exposed_headers' => ['Link'],
+    'exposed_headers' => ['Link', 'X-RateLimit-Limit', 'X-RateLimit-Remaining'],
 
     /*
      * Sets the Access-Control-Max-Age response header when > 0.