Allow x-Origin header which indicates processed by origin (#26)

Co-authored-by: Jon Breen <[email protected]>
cultpodcasts · May 22, 2024 · c018e97 · c018e97
1 parent 140cafc
commit c018e97
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -68,6 +68,7 @@ app.use('/*', cors({
 	allowMethods: ['GET', 'HEAD', 'POST', 'OPTIONS'],
 	maxAge: 86400,
 	credentials: true,
+	exposeHeaders: ['X-Origin']
 }))
 
 app.get('/homepage', async (c) => {
@@ -305,7 +306,7 @@ app.post("/submit", auth0Middleware, async (c) => {
 		if (resp.status == 200) {
 			console.log(`Successfully used secure-submit-endpoint.`);
 			const resp = c.json({ success: "Submitted" });
-			resp.headers.set("x-origin", "true");
+			resp.headers.set("X-Origin", "true");
 			return resp;
 		} else {
 			console.log(`Failed to use secure-submit-endpoint. Response code: '${resp.status}'.`);