fix: expose only supported cors methods

Author: panva

lib/helpers/initialize_app.js

@@ -95,7 +95,7 @@ module.exports = function initializeApp() {
   };
 
   const { routes } = configuration;
-  const onlyGetCors = getCors({ allowedMethods: 'GET' });
+  const onlyGetCors = getCors({ allowMethods: 'GET' });
 
   Object.entries(grants).forEach(([grantType, { handler, parameters }]) => {
     const { grantTypeHandlers } = instance(this);
@@ -142,7 +142,7 @@ module.exports = function initializeApp() {
 
   const userinfo = getUserinfo(this);
   const userInfoCors = getCors({
-    allowedMethods: 'GET,POST', exposeHeaders: 'WWW-Authenticate', allowHeaders: 'Authorization',
+    allowMethods: 'GET,POST', exposeHeaders: 'WWW-Authenticate', allowHeaders: 'Authorization',
   });
   get('userinfo', routes.userinfo, userInfoCors, error(this, 'userinfo.error'), ...userinfo);
   post('userinfo', routes.userinfo, userInfoCors, error(this, 'userinfo.error'), ...userinfo);