mysociety / popit-api

DEPRECATED - Development on PopIt has stopped and it is no longer being maintained
https://goo.gl/Vvej4Q
Other
17 stars 3 forks source link

Run CORS preflight check before auth happens #129

Closed chrismytton closed 9 years ago

chrismytton commented 9 years ago

This makes it easier to trap auth errors on the client side by checking the status code of the actual response, rather than the 401 being on the preflight check.

Fixes https://github.com/mysociety/popit/issues/776

struan commented 9 years ago

Looks fine.