CORS Preflight requests require Authorization

Hi colleagues,

I have developed an external webserver that requests some data from ctrlX Datalayer using REST API. Since version 01V20, I'm now having some issues whenever preflight requests are triggered (specifically when not 'simple' (MDN Term) requests are made to the API).

Seems to me, that the Datalayer API is requiring 'Authorization' header even for OPTIONS request, which is not right. We have no control over the CORS request to add such header, this is automatically done by the browser.

https://stackoverflow.com/a/52072116

https://stackoverflow.com/a/40723041

Best reply by nickH

Hi,ย 

I got an update for you on this issue. This should be fixed with the next patch of V1.20 (relese is next week) and with the release of V2.02.ย 

Best regards,ย 

Nick

View original
4 replies