Authorization header not sent on preflight OPTIONS request

[Bampf]

> I started a new post on Stackoverflow, since I do not think this is an ExtJS/CORS issue.

I'm having a similar issue-- I'd be interested in a link to your StackOverflow post. Thanks!

[horcle_buzz]

So far I have gotten no responses. The thread is here: http://stackoverflow.com/questions/3...ith-basic-auth

I do know that basic auth works directly through the API (python/flask) on all browsers, so it definitely has to do with Ajax. Haven't had much time to look into it lately though.

[f.baron]

I think that the OPTION pre-flight must only contains the request header names, not values, as a list in the "Access-Control-Request-Headers" header.

https://developer.mozilla.org/en-US/...equest-Headers

Ext.Ajax.request({
    url: 'https://www.googleapis.com/plus/v1/people/me/activities/public',
    method: 'GET',
    useDefaultXhrHeader: false,
    cors: true,
    headers: {
        'Authorization': 'Bearer asdasd67as6d78as6'
    }
});

This code produces an OPTION request with

access-control-request-headers: authorization, x-requested-with

and then a GET request with

authorization: Bearer asdasd67as6d78as6