@@ -47,4 +47,22 @@ func TestCORS(t *testing.T) {
47
47
assert .NotEmpty (t , rec .Header ().Get (echo .HeaderAccessControlAllowMethods ))
48
48
assert .Equal (t , "true" , rec .Header ().Get (echo .HeaderAccessControlAllowCredentials ))
49
49
assert .Equal (t , "3600" , rec .Header ().Get (echo .HeaderAccessControlMaxAge ))
50
+
51
+ // Preflight request with `AllowOrigins` *
52
+ req = httptest .NewRequest (echo .OPTIONS , "/" , nil )
53
+ rec = httptest .NewRecorder ()
54
+ c = e .NewContext (req , rec )
55
+ req .Header .Set (echo .HeaderOrigin , "localhost" )
56
+ req .Header .Set (echo .HeaderContentType , echo .MIMEApplicationJSON )
57
+ cors := CORSWithConfig (CORSConfig {
58
+ AllowOrigins : []string {"*" },
59
+ AllowCredentials : true ,
60
+ MaxAge : 3600 ,
61
+ })
62
+ h = cors (echo .NotFoundHandler )
63
+ h (c )
64
+ assert .Equal (t , "localhost" , rec .Header ().Get (echo .HeaderAccessControlAllowOrigin ))
65
+ assert .NotEmpty (t , rec .Header ().Get (echo .HeaderAccessControlAllowMethods ))
66
+ assert .Equal (t , "true" , rec .Header ().Get (echo .HeaderAccessControlAllowCredentials ))
67
+ assert .Equal (t , "3600" , rec .Header ().Get (echo .HeaderAccessControlMaxAge ))
50
68
}
0 commit comments