HTTP headers should not be case-sensitive

Question

HTTP headers should not be case-sensitive

Closed this issue a year ago · 3 comments

Currently experiencing an error with the Auth0 plugin for VueJS where making a request with an Authorization header creates a preflight request asking for "authorization" instead of "Authorization". This should be accepted by the CORS package.

Answer 1 · 2023-07-11T00:38:01.000Z

Turns out ALL header names should be non-case-sensitive. Working on a fix.

Answer 2 · 2023-07-11T00:59:14.000Z

Turns out Go manages case sensitivity of headers, so we've wrapped back around to it just being a CORS problem. I made a fix and I'm updating documentation to mention the change in patch v1.2.2. PR incoming!

Answer 3 · 2023-07-11T01:05:25.000Z

Closed by #98