public static CorsConfig allowMethods(final String... methods) {
        if (Arrays.stream(methods).allMatch(MocoCors::isValidMethod)) {
            return new CorsMethodsConfig(methods);
        }

        throw new IllegalArgumentException("Invalid HTTP method");
    }
@Test
    public void should_not_allow_unknown_headers() {
        assertThrows(IllegalArgumentException.class, () ->
                allowMethods("foo"));
    }