add headers and restirct domains methods

api/main.py

@@ -59,7 +59,7 @@ app.add_middleware(
     allow_credentials=True,
     allow_methods=["POST","GET"],
     #allow_headers=["*"],
-    allow_headers = ["Accept","Origin","Content-Type","X-LS-CORS-Template","X-LS-Auth-Token","X-LS-Auth-User-Token","Content-Type","X-LS-Sync-Result","X-LS-Sequence","token"],
+    allow_headers = ["Authorization","Accept","Origin","Content-Type","X-LS-CORS-Template","X-LS-Auth-Token","X-LS-Auth-User-Token","Content-Type","X-LS-Sync-Result","X-LS-Sequence","token"],
 )