diff --git a/app/api/middleware.py b/app/api/middleware.py
index 56d43ec..b29e3f4 100644
--- a/app/api/middleware.py
+++ b/app/api/middleware.py
@@ -15,7 +15,7 @@ from datetime import datetime, timedelta
 def attach_headers(response):
     response.headers["Access-Control-Allow-Origin"] = "*"
     response.headers["Access-Control-Allow-Methods"] = "GET, POST, OPTIONS"
-    response.headers["Access-Control-Allow-Headers"] = "Origin, Content-Type, Accept, Authorization, Referer, User-Agent, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site"
+    response.headers["Access-Control-Allow-Headers"] = "Origin, Content-Type, Accept, Authorization, Referer, User-Agent, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, x-file-name, x-content-sha256"
     response.headers["Access-Control-Allow-Credentials"] = "true"
     return response