I know this has been asked a LOT and I have reviewed a LOT of other answers, but I am still missing something. I used these options on my in my apache2.conf:
Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Headers "*"
Header always set Access-Control-Allow-Methods "GET,POST,OPTIONS,PUT,DELETE"
Header always set Access-Control-Expose-Headers "*"
Header always set Access-Control-Max-Age "600"
And according to chrome debugging the server responses are changing as I make changes in my config, so it is being updated, but I still get a 401 FU response every time:
It does work if I use this command for a security disabled chrome browser: chrome.exe --user-data-dir="C:\Chrome dev session" --disable-web-security Credit to: Response to preflight request doesn't pass access control check But my chrome CORS disable extension doesn't fix it, and well to me it looks like I've set this up right so it should just work.
I really want to understand how to fix this for Apache while I'm in Dev.
Any help greatly appreciated!