handle authorization header in cors when is upper cased. fixes #180, #…

…173
auth0 · Apr 20, 2022 · ab0ee80 · ab0ee80
1 parent 624bf73
commit ab0ee80
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -40,7 +40,7 @@ export const expressjwt = (options: Params) => {
       if (req.method === 'OPTIONS' && 'access-control-request-headers' in req.headers) {
         const hasAuthInAccessControl = req.headers['access-control-request-headers']
           .split(',')
-          .map(header => header.trim())
+          .map(header => header.trim().toLowerCase())
           .includes('authorization');
         if (hasAuthInAccessControl) {
           return next();