fix: Allow credentials over CORS.

This commit is contained in:
Ruben Verborgh 2021-01-04 14:06:02 +01:00
parent bf61007eec
commit ee072b038a
2 changed files with 2 additions and 0 deletions

View File

@ -16,6 +16,7 @@
"PATCH", "PATCH",
"DELETE" "DELETE"
], ],
"CorsHandler:_options_credentials": true,
"CorsHandler:_options_exposedHeaders": [ "CorsHandler:_options_exposedHeaders": [
"Location", "Location",
"Updates-Via" "Updates-Via"

View File

@ -44,6 +44,7 @@ describe('An Express server with middleware', (): void => {
it('returns CORS headers for an OPTIONS request.', async(): Promise<void> => { it('returns CORS headers for an OPTIONS request.', async(): Promise<void> => {
const res = await request(server) const res = await request(server)
.options('/') .options('/')
.set('Access-Control-Allow-Credentials', 'true')
.set('Access-Control-Request-Headers', 'content-type') .set('Access-Control-Request-Headers', 'content-type')
.set('Access-Control-Request-Method', 'POST') .set('Access-Control-Request-Method', 'POST')
.set('Host', 'test.com') .set('Host', 'test.com')