what makes CORS hard to use?
@b0rk silent and confusing failure modes. it's annoying to set up a browser in such a way that you can even see the headers at all, let alone exactly what the browser is parsing, how it's matching, etc. No way to articulate to any debug tool I've ever used, "I expect *this* to work, tell me why it isn't"
@glyph thanks, I thought that the info was always there in the Network tab but I checked and you can't see anything about the OPTIONS request at all
@b0rk I had a bug with AWS pre-signed URLs a while ago, and the issue was the preflight request failing, and I had no trouble seeing it in the browser developer tools. I’ll double check later.
@glyph