fix: expose only supported cors methods

panva · Feb 20, 2019 · 4a81104 · 4a81104
1 parent d642f8b
commit 4a81104
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/helpers/initialize_app.js b/lib/helpers/initialize_app.js
@@ -95,7 +95,7 @@ module.exports = function initializeApp() {
   };
 
   const { routes } = configuration;
-  const onlyGetCors = getCors({ allowedMethods: 'GET' });
+  const onlyGetCors = getCors({ allowMethods: 'GET' });
 
   Object.entries(grants).forEach(([grantType, { handler, parameters }]) => {
     const { grantTypeHandlers } = instance(this);
@@ -142,7 +142,7 @@ module.exports = function initializeApp() {
 
   const userinfo = getUserinfo(this);
   const userInfoCors = getCors({
-    allowedMethods: 'GET,POST', exposeHeaders: 'WWW-Authenticate', allowHeaders: 'Authorization',
+    allowMethods: 'GET,POST', exposeHeaders: 'WWW-Authenticate', allowHeaders: 'Authorization',
   });
   get('userinfo', routes.userinfo, userInfoCors, error(this, 'userinfo.error'), ...userinfo);
   post('userinfo', routes.userinfo, userInfoCors, error(this, 'userinfo.error'), ...userinfo);