add vary headers to access-protected responses

Holusion · Jan 10, 2025 · dada2a9 · dada2a9
1 parent 22c2b61
commit dada2a9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/source/server/utils/locals.ts b/source/server/utils/locals.ts
@@ -104,7 +104,7 @@ function _perms(check:number,req :Request, res :Response, next :NextFunction){
   if(!scene) throw new BadRequestError("no scene parameter in this request");
   if(check < 0 || AccessTypes.length <= check) throw new InternalError(`Bad permission level : ${check}`);
 
-  res.append("Cache-Control", "private");
+  res.set("Vary", "Cookie, Authorization");
 
   if(isAdministrator) return next();