CORS OPTIONS(Preflight request) request should return 204

[dzmitry-lahoda]

Next line returns 200 as status

kong/kong/plugins/cors/handler.lua

Line 13 in c817fad

local HTTP_OK = 200

Internet says it should return 204:

• https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request
• https://docs.microsoft.com/en-us/aspnet/core/security/cors?view=aspnetcore-3.1#preflight-requests

Internet changed its mind since 2018 #4029

[ms2008]

The spec doesn’t prescribe what status code to return. See https://stackoverflow.com/a/46028619 for details.