From cd8a7aca617168edb89d1df6d6b0b2d5968b1c44 Mon Sep 17 00:00:00 2001
From: lifegpc <root@lifegpc.com>
Date: Mon, 3 Jun 2024 13:44:08 +0800
Subject: [PATCH] Always add Origin to Vary header

---
 routes/file/_middleware.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/routes/file/_middleware.ts b/routes/file/_middleware.ts
index 2e710a6..1c6bdab 100644
--- a/routes/file/_middleware.ts
+++ b/routes/file/_middleware.ts
@@ -26,8 +26,8 @@ export async function handler(req: Request, ctx: FreshContext) {
             const c = m.cfg.cors_credentials_hosts.includes(origin);
             headers.set("Access-Control-Allow-Origin", origin);
             if (c) headers.set("Access-Control-Allow-Credentials", "true");
-            headers.append("Vary", "Origin");
         }
+        headers.append("Vary", "Origin");
         return new Response(res.body, {
             status: res.status,
             headers: headers,