And then cURL it, you can see, the Access-Control-Allow-Origin: * header is coming back, but nothing to do with methods it supports (e.g. Access-Control-Allow-Methods or the other headers) . Further more, a cURL with OPTIONS is returning a 500 which means pre-flight requests won't work.
GET and POST (and HEAD) requests don't require a pre-flight, which probably explains why they have worked to date, however PUT and others do.
Looks like we don't support the OPTIONS pre-flight check, and probably explicitly allow all methods to be used.
See https://github.com/pact-foundation/pact-js/issues/58#issuecomment-304843097 for some background.
If you start the mock service as follows:
And then cURL it, you can see, the
Access-Control-Allow-Origin: *
header is coming back, but nothing to do with methods it supports (e.g.Access-Control-Allow-Methods
or the other headers) . Further more, acURL
withOPTIONS
is returning a 500 which means pre-flight requests won't work.GET
andPOST
(andHEAD
) requests don't require a pre-flight, which probably explains why they have worked to date, howeverPUT
and others do.Looks like we don't support the OPTIONS pre-flight check, and probably explicitly allow all methods to be used.