[GitHub] csantanapr commented on issue #4009: enhancement: add user-agent to allowed CORS headers

[GitBox <gi...@apache.org>]

csantanapr commented on issue #4009: enhancement: add user-agent to allowed CORS headers
URL: https://github.com/apache/incubator-openwhisk/issues/4009#issuecomment-419643535
 
 
   The proper fix is to check if request method is OPTIONS AND contains the header Access-Control-Request-Headers then in the response for that request (pre flight) then echo back the same value in Access-Control-Allow-Headers
   
   I just double check what we do in the apigateway for default config for Cors https://github.com/apache/incubator-openwhisk-apigateway/blob/master/scripts/lua/cors.lua
   
   There might be other headers to allow it all depends on the request header value. 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services