Response for preflight 403 forbidden

Question

I\'ve been trying to make a simple iron-ajax post to the server, but it keeps failing at the preflight call. For the life of me I can\'t figure out what\'s goin

Answer 1

The 403 response status indicates a general problem with the server backend not being configured to handle OPTIONS requests, not just CORS preflight OPTIONS requests.

The server must respond to OPTIONS requests with a 2xx success status—typically 200 or 204.

If the server doesn’t do that, it makes no difference what Access-Control-* headers you have it configured to send. And the answer to configuring the server to handle OPTIONS requests in the right way—to send a 200 or 204 success message—depends on what server software it’s running