Kris Borchers edited a comment on Bug AEROGEAR-1243

According to the W3C spec, user credentials should never be sent with preflight (OPTIONS) requests. This means that the server should respond to an OPTIONS request even if the eventual request (GET, POST, ...) is protected by Basic or Digest authentication and should not send a 401.

http://www.w3.org/TR/cors/#preflight-request

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira