only check HTTP_ACCESS_CONTROL_REQUEST_METHOD for options requests

apiaframework · Nov 9, 2023 · 9654854 · 9654854
1 parent af24b05
commit 9654854
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/apia/rack.rb b/lib/apia/rack.rb
@@ -79,7 +79,7 @@ def handle_request(env, api_path)
 
       validate_api if development?
 
-      access_control_request_method = env['HTTP_ACCESS_CONTROL_REQUEST_METHOD']&.upcase
+      access_control_request_method = request_method == 'OPTIONS' ? env['HTTP_ACCESS_CONTROL_REQUEST_METHOD']&.upcase : nil
       route = find_route((access_control_request_method || request_method), api_path)
       if route.nil?
         Apia::Notifications.notify(:request_route_not_found, notify_hash)