makes sense. in this case, we’re using the defaul...

# ktor

[joshua.ewer]

makes sense. in this case, we’re using the default install(CORS){}, are including Access-Control-Request-Headers: authorization in the header but not providing a header Authorization: xxxx