[CORS] also expose Updates-Via

deiu · deiu · commit 7ecffe1de0b1 · 2016-02-23T16:29:00.000-05:00
diff --git a/lib/create-app.js b/lib/create-app.js
@@ -14,7 +14,7 @@ var corsSettings = cors({
   methods: [
     'OPTIONS', 'HEAD', 'GET', 'PATCH', 'POST', 'PUT', 'DELETE'
   ],
-  exposedHeaders: 'User, Location, Link, Vary, Last-Modified, ETag, Accept-Patch, Content-Length',
+  exposedHeaders: 'User, Location, Link, Vary, Last-Modified, ETag, Accept-Patch, Updates-Via, Content-Length',
   credentials: true,
   maxAge: 1728000,
   origin: true
@@ -46,12 +46,6 @@ function createApp (argv) {
     next()
   })
 
-  // Set default Allow methods
-  app.use(function (req, res, next) {
-    res.set('Allow', 'OPTIONS,HEAD,GET')
-    next()
-  })
-
   // Session
   app.use(session(sessionSettings))
 
diff --git a/test/http.js b/test/http.js
@@ -101,7 +101,7 @@ describe('HTTP APIs', function () {
           .expect('Access-Control-Allow-Origin', 'http://example.com')
           .expect('Access-Control-Allow-Credentials', 'true')
           .expect('Access-Control-Allow-Methods', 'OPTIONS,HEAD,GET,PATCH,POST,PUT,DELETE')
-          .expect('Access-Control-Expose-Headers', 'User, Location, Link, Vary, Last-Modified, ETag, Accept-Patch, Content-Length')
+          .expect('Access-Control-Expose-Headers', 'User, Location, Link, Vary, Last-Modified, ETag, Accept-Patch, Updates-Via, Content-Length')
           .expect(204, done)
       })
 
