fix: Expose WAC-Allow via CORS.

Closes #873
CommunitySolidServer · Jul 28, 2021 · 0271536 · 0271536
1 parent a926839
commit 0271536
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/config/http/middleware/handlers/cors.json b/config/http/middleware/handlers/cors.json
@@ -19,7 +19,8 @@
         "Accept-Patch",
         "Location",
         "MS-Author-Via",
-        "Updates-Via"
+        "Updates-Via",
+        "WAC-Allow"
       ]
     }
   ]

diff --git a/test/integration/Middleware.test.ts b/test/integration/Middleware.test.ts
@@ -111,6 +111,12 @@ describe('An http server with middleware', (): void => {
     expect(exposed.split(/\s*,\s*/u)).toContain('MS-Author-Via');
   });
 
+  it('exposes the WAC-Allow header via CORS.', async(): Promise<void> => {
+    const res = await request(server).get('/').expect(200);
+    const exposed = res.header['access-control-expose-headers'];
+    expect(exposed.split(/\s*,\s*/u)).toContain('WAC-Allow');
+  });
+
   it('exposes the Updates-Via header via CORS.', async(): Promise<void> => {
     const res = await request(server).get('/').expect(200);
     const exposed = res.header['access-control-expose-headers'];