From cea6279a08873964f620e22e5a6e1de3941d1e33 Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Thu, 9 Apr 2026 19:26:24 -0400
Subject: [PATCH] fix: add Last-Event-ID to CORS allow_headers to unblock SSE
 reconnects

---
 decnet/web/api.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/decnet/web/api.py b/decnet/web/api.py
index c5610f2..40d0ca3 100644
--- a/decnet/web/api.py
+++ b/decnet/web/api.py
@@ -54,7 +54,7 @@ app.add_middleware(
     allow_origins=DECNET_CORS_ORIGINS,
     allow_credentials=False,
     allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"],
-    allow_headers=["Authorization", "Content-Type"],
+    allow_headers=["Authorization", "Content-Type", "Last-Event-ID"],
 )
 
 # Include the modular API router