Request header not allowed about falcon-cors HOT 3 CLOSED

@DriesS i think the problem is due to two things:

1. you should configure falcon-cors to allow credentials. Given your configuration, i think you should also set allow_credentials_all_origins = True
2. in your javascript code, when you make the AJAX request, you must set the property withCredentials = true

Your AJAX call should be something like this:

var xmlhttp = new XMLHttpRequest();
xmlhttp.open(method, url, true);
xmlhttp.withCredentials = true;
xmlhttp.setRequestHeader('Content-type', 'application/json');
xmlhttp.send(' { "param" : "blah blah blah" } ');

At least, i can say that i was having the same issue and those two things fixed the problem.

from falcon-cors.

Could you please add the -v argument to your curl command and post the response?

from falcon-cors.

I am using extjs 6 gpl and I get same problem Request header field content-type is not allowed by Access-Control-Allow-Headers in preflight response.
Access-Control-Request-He... content-type,x-requested-with

from falcon-cors.