Adding headers to axios.post method

Hi,

I tried to make a post request to cross-domain IP and my code looks like;

  var authOptions = {
    method: 'POST',
    url: 'http://10.254.147.184:7777/auth/oauth/token',
    data: qs.stringify(data),
    headers: {
        'Authorization': 'Basic Y2xpZW50OnNlY3JldA==',
        'Content-Type': 'application/x-www-form-urlencoded'
    },
    json: true
  };
  return dispatch => {
    return axios(authOptions)
    .then(function(response){
      console.log(response.data);
      console.log(response.status);
    })
    .catch(function(error){
      console.log(error);
    });

But whenever I add ‘headers’ to it, my request automatically turns into ‘OPTIONS’ from ‘POST’ method and I don’t know why. Is there a bug about it or anything I couldn’t find?

[ofiesh]

Edit: I had to add Authorization to allowed headers in my CORS filter

---

@jffernandez

I’m having the same issue. When I leave out the Auth header I’m getting an Options request which returns POST, OPTIONS and then the POST which returns a 403 because it’s missing the Authorization header (expected).

When I add the header I just get the option request and it never makes the POST.

post("http://localhost:8080/foo", foo)

vs

post("http://localhost:8080/foo", foo, {
    headers: { Authorization: "Bearer " + token }
})

[jffernandez]

This is not a bug, it’s working as expected. You are generating a preflighted request (not a simple one) as stated in the docs https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS because you are adding a header and a content-type that forces this. So, in this mode, an OPTIONS request is issued before your main request, you must ensure the server can manage the OPTIONS request for it to work.