im kind of confused. i installed `CORS` (with GET,...

# ktor

[damian]

im kind of confused. i installed CORS (with GET, POST, OPTIONS methods, anyHost and exposeHeader("Access-Control-Allow-Origin")) but i'm still receiving 403 for requests

[damian]

ok i think my confusion comes from OPTIONS http type. i implemented a GET route, but javascript-fetch does a call with type OPTIONS first apparently, which fails.

[orangy]

CORS feature should properly handle pre-flight (OPTIONS) requests

[damian]

all i'm getting is 403 unfortunately

[damian]

my setup looks like this:

app.install(CORS) {
            method(HttpMethod.Get)
            method(<http://HttpMethod.Post|HttpMethod.Post>)
            method(HttpMethod.Options)
            anyHost()
            exposeHeader("Access-Control-Allow-Origin")
        }

[damian]

i'm on 0.9.1-alpha-8

[orangy]

@cy ^^

[damian]

ok, found the mistake with some breakpoints. i had to add header("Authorization") to the CORS setup, now it's working 👍 thanks.