Re: [whatwg/fetch] CORS: why is Authorization request header forcing preflight? (#770) from sleevi on 2018-06-25 (public-webapps-github@w3.org from June 2018)

From: sleevi <notifications@github.com>
Date: Mon, 25 Jun 2018 10:26:26 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/770/400031037@github.com>

@dvoytenko I'm sorry, I understand many of the things you're speaking about, but I'm having trouble understanding your argument or where, and how, the Authorization header helps. It sounds like you want Authorization to be the new Cookie, to work around ITP, and that hopefully is not a correct interpretation.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/770#issuecomment-400031037

Received on Monday, 25 June 2018 17:26:50 UTC