fix: access-control-allow-methods header naming and value

2023-12-20 11:12:06 +05:00
parent 69d022c061
commit 162ca55092
2 changed files with 3 additions and 3 deletions
--- a/internal/server/middleware.go
+++ b/internal/server/middleware.go
@@ -7,7 +7,7 @@ import "net/http"
 func enableCORS(handler func(w http.ResponseWriter, r *http.Request)) func(w http.ResponseWriter, r *http.Request) {
 	return func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("access-control-allow-origin", "*")
-		w.Header().Set("access-control-allow-method", "post")
+		w.Header().Set("access-control-allow-methods", "options, post")
 		w.Header().Set("access-control-allow-headers", "authorization, content-type")
 		w.Header().Set("access-control-max-age", "3600")
 		if r.Method == http.MethodOptions {