CORS Error due to lowercase

[Hobart2967]

Firefox will not recognize cors headers due to them being lowercased:

lambda-api/lib/response.js

Line 68 in 0b753d8

let _key = key.toLowerCase() // store as lowercase

Removing the "toLowerCase" fixes the issue.

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://url.com/bla. (Reason: header ‘sentry-trace’ is not allowed according to header ‘Access-Control-Allow-Headers’ from CORS preflight response).

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://url.com/bla. (Reason: CORS request did not succeed).

[Hobart2967]

Added PR for this issue

[jeremydaly]

Hi @Hobart2967. Lowercasing was done to be compatible with HTTP/2 and the change that Chrome made in version 60. See more here: elm/http#31

I haven't looked into the status of the RFC or whether or not this has been reverted, but we can't just turn this off since it would break a number of existing applications. If you can share any updated research on this, then we can figure out a workaround that is backwards compatible.

[Hobart2967]

Got ya, but on the other hand you're dropping browser support. Will adjust the PR to make it configurable

[Hobart2967]

See here: #169

I added a configuration entry headerStyle that applies the non-compliant header styles.