Cors headers in unauthorized response

laardee / serverless-authentication-boilerplate

Generic authentication boilerplate for Serverless framework

http://laardee.github.io/serverless-authentication-gh-pages

MIT License

568 stars 71 forks source link

Cors headers in unauthorized response #47

Open patrickcorrigan opened 7 years ago

patrickcorrigan commented 7 years ago

Hello, I'm using your auth framwork and am very happy with it. I cannot seem to figure out how to get the unauthorized 401 messages to include cors headers. What do you recommend?

patrickcorrigan commented 7 years ago

Looks like it's an api gateway limitation http://forum.serverless.com/t/how-to-enable-cors-for-custom-authorizers-aws-api-gateways/1660