fix: process OPTIONS request in auth (#189)

closes #180
neondatabase · Mar 25, 2024 · 04e9148 · 04e9148
1 parent 4b856f3
commit 04e9148
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/auth.ts b/src/auth.ts
@@ -88,6 +88,18 @@ export const auth = async ({ oauthHost, clientId }: AuthProps) => {
         response.end();
         return;
       }
+
+      // process the CORS preflight OPTIONS request
+      if (request.method === 'OPTIONS') {
+        response.writeHead(200, {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET, POST',
+          'Access-Control-Allow-Headers': 'Content-Type',
+        });
+        response.end();
+        return;
+      }
+
       log.debug(`Callback received: ${request.url}`);
       const params = neonOAuthClient.callbackParams(request);
       const tokenSet = await neonOAuthClient.callback(