From 7543ec2e8c216717076ca3b42f3b437d7aaa59c4 Mon Sep 17 00:00:00 2001
From: LeoKHoward <38526889+LeoKHoward@users.noreply.github.com>
Date: Mon, 14 Jul 2025 08:04:08 +0100
Subject: [PATCH 1/3] NPA-52222: Fix PATCH Consent Try It Out Now Defaults

---
 proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
index c07cd2f8..a8ad7c05 100644
--- a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
+++ b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
@@ -4,11 +4,11 @@
     <Set>
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
-            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id, x-im1-connection-params</Header>
+            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id</Header>
             <!--you can add headers here if you want to expose
             <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
             <Header name="Access-Control-Max-Age">3628800</Header>
-            <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE</Header>
+            <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE, PATCH</Header>
         </Headers>
     </Set>
     <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>

From 1371e4d9da85e28e10c7e4a187361954d0e6e762 Mon Sep 17 00:00:00 2001
From: LeoKHoward <38526889+LeoKHoward@users.noreply.github.com>
Date: Mon, 14 Jul 2025 08:08:49 +0100
Subject: [PATCH 2/3] NPA-52222: Revert change

---
 proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
index a8ad7c05..7ff37869 100644
--- a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
+++ b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
@@ -4,8 +4,7 @@
     <Set>
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
-            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id</Header>
-            <!--you can add headers here if you want to expose
+            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id, x-im1-connection-params</Header>            <!--you can add headers here if you want to expose
             <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
             <Header name="Access-Control-Max-Age">3628800</Header>
             <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE, PATCH</Header>

From f02fdeb08edff18c3e0ef68e1b33e2719c84682f Mon Sep 17 00:00:00 2001
From: LeoKHoward <38526889+LeoKHoward@users.noreply.github.com>
Date: Mon, 14 Jul 2025 08:09:27 +0100
Subject: [PATCH 3/3] NPA-52222: Revert change again

---
 proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
index 7ff37869..1e496d30 100644
--- a/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
+++ b/proxies/sandbox/apiproxy/policies/AssignMessage.AddCors.xml
@@ -4,7 +4,8 @@
     <Set>
         <Headers>
             <Header name="Access-Control-Allow-Origin">{request.header.origin}</Header>
-            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id, x-im1-connection-params</Header>            <!--you can add headers here if you want to expose
+            <Header name="Access-Control-Allow-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, authorization, x-correlation-id, x-request-id, x-im1-connection-params</Header>
+            <!--you can add headers here if you want to expose
             <Header name="Access-Control-Expose-Headers">origin, x-requested-with, accept, content-type, nhsd-session-urid, x-my-new-header</Header> -->
             <Header name="Access-Control-Max-Age">3628800</Header>
             <Header name="Access-Control-Allow-Methods">GET, PUT, POST, DELETE, PATCH</Header>