Header field Access-Control-Expose-Header is not correctly set due to typo and access of wrong variables

[KilianB]

Due to a typo the middleware is setting the header value Access-Control-Exposed-Headers, it should be Access-Control-Expose-Headers, instead. Without the d. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers

elysia-cors/src/index.ts

Line 292 in 41e3465

set.headers['Access-Control-Exposed-Headers'] =

Additionally the exposedHeader field is checked in order to set the allowed headers:

elysia-cors/src/index.ts

Lines 251 to 252 in 41e3465

	if (exposedHeaders.length)
	set.headers['Access-Control-Allow-Headers'] =

[Mudbill]

Came here to report the same thing. I do see the Expose header in my response, but I also see Exposed in the list. Spent some time trying to find if there's anything real attached to the Exposed header because it seemed wrong to me. Confusing at the very least.

[SaltyAom]

Fixed with 6ba3b48, published under 1.0.4