[whatwg/fetch] Move 401/407 to HTTP-network-or-cache fetch (#363)

And with that I guess the CORS check since this would require passing the _CORS flag_ along.

The reason being that 401/407 responses that cause a subsequent request are purely a network affair. Service workers should not be able to cause that subsequent request and should never get a fetch event for it. The easiest way to guarantee that is by simply making them network-only.

Realized this while going through https://github.com/slightlyoff/ServiceWorker/issues/793.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/363