Allow POST requests for user info endpoint

config/initializers/cors.rb

@@ -5,7 +5,7 @@ Rails.application.config.middleware.insert 0, Rack::Cors do
     resource "/webfinger"
     resource "/.well-known/webfinger"
     resource "/.well-known/openid-configuration"
-    resource "/api/openid_connect/user_info", methods: :get
+    resource "/api/openid_connect/user_info", methods: %i(get post)
     resource "/api/v0/*", methods: %i(get post delete)
   end
 end

config/routes.rb

@@ -250,7 +250,7 @@ Diaspora::Application.routes.draw do
       post "authorizations/new", to: "authorizations#new"
       get "user_applications", to: "user_applications#index"
       get "jwks.json", to: "id_tokens#jwks"
-      get "user_info", to: "user_info#show"
+      match "user_info", to: "user_info#show", via: %i(get post)
     end
   end
 

db/schema.rb

@@ -11,7 +11,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20150801074555) do
+ActiveRecord::Schema.define(version: 20150828132451) do
 
   create_table "account_deletions", force: :cascade do |t|
     t.string   "diaspora_handle", limit: 255