From 115f92660df8449707cd4a68e1725ed2cb7f6836 Mon Sep 17 00:00:00 2001
From: sneak <sneak@sneak.berlin>
Date: Thu, 8 Jan 2026 02:21:30 -0800
Subject: [PATCH] Define CORSMaxAgeSeconds constant

---
 internal/middleware/middleware.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/internal/middleware/middleware.go b/internal/middleware/middleware.go
index ec83c01..620e0dd 100644
--- a/internal/middleware/middleware.go
+++ b/internal/middleware/middleware.go
@@ -18,6 +18,9 @@ import (
 	"sneak.berlin/go/pixa/internal/logger"
 )
 
+// CORSMaxAgeSeconds is the max age for CORS preflight cache (24 hours).
+const CORSMaxAgeSeconds = 86400
+
 // MiddlewareParams defines dependencies for Middleware.
 type MiddlewareParams struct {
 	fx.In
@@ -104,7 +107,7 @@ func (s *Middleware) CORS() func(http.Handler) http.Handler {
 		AllowedHeaders:   []string{"Accept", "Authorization", "Content-Type"},
 		ExposedHeaders:   []string{"Link"},
 		AllowCredentials: false,
-		MaxAge:           86400,
+		MaxAge:           CORSMaxAgeSeconds,
 	})
 }