diff --git a/src/main/java/ca/uhn/fhir/jpa/starter/HapiProperties.java b/src/main/java/ca/uhn/fhir/jpa/starter/HapiProperties.java
index 1dc4ca6..40faec3 100644
--- a/src/main/java/ca/uhn/fhir/jpa/starter/HapiProperties.java
+++ b/src/main/java/ca/uhn/fhir/jpa/starter/HapiProperties.java
@@ -42,7 +42,7 @@ public class HapiProperties {
     static final String TESTER_CONFIG_REFUSE_TO_FETCH_THIRD_PARTY_URLS = "tester.config.refuse_to_fetch_third_party_urls";
     static final String CORS_ENABLED = "cors.enabled";
     static final String CORS_ALLOWED_ORIGIN = "cors.allowed_origin";
-    static final String CORS_ALLOWED_CREDENTIALS = "hapi.properties";
+    static final String CORS_ALLOW_CREDENTIALS = "cors.allowCredentials";
     static final String ALLOW_CONTAINS_SEARCHES = "allow_contains_searches";
     static final String ALLOW_OVERRIDE_DEFAULT_SEARCH_PARAMS = "allow_override_default_search_params";
     static final String EMAIL_FROM = "email.from";
@@ -326,6 +326,6 @@ public class HapiProperties {
     }
 
     public static Boolean getCorsAllowedCredentials() {
-        return HapiProperties.getBooleanProperty(CORS_ALLOWED_CREDENTIALS, false);
+        return HapiProperties.getBooleanProperty(CORS_ALLOW_CREDENTIALS, false);
     }
 }
diff --git a/src/main/resources/hapi.properties b/src/main/resources/hapi.properties
index dd7d758..6a34a06 100644
--- a/src/main/resources/hapi.properties
+++ b/src/main/resources/hapi.properties
@@ -54,7 +54,7 @@ cors.enabled=true
 cors.allowCredentials=true
 # Supports multiple, comma separated allowed origin entries
 # cors.allowed_origin=http://localhost:8080,https://localhost:8080,https://fhirtest.uhn.ca
-cors.allowed_origin=*
+cors.allow_origin=*
 
 ##################################################
 # Subscriptions