Resolved BugFix #993 (#996)

ThreeMammals · Sep 23, 2019 · c8a2144 · c8a2144
1 parent 88f3196
commit c8a2144
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/Ocelot/Authorisation/Middleware/AuthorisationMiddleware.cs b/src/Ocelot/Authorisation/Middleware/AuthorisationMiddleware.cs
@@ -25,7 +25,7 @@ public class AuthorisationMiddleware : OcelotMiddleware
 
         public async Task Invoke(DownstreamContext context)
         {
-            if (IsAuthenticatedRoute(context.DownstreamReRoute))
+            if (!IsOptionsHttpMethod(context) && IsAuthenticatedRoute(context.DownstreamReRoute))
             {
                 Logger.LogInformation("route is authenticated scopes must be checked");
 
@@ -52,7 +52,7 @@ public async Task Invoke(DownstreamContext context)
                 }
             }
 
-            if (IsAuthorisedRoute(context.DownstreamReRoute))
+            if (!IsOptionsHttpMethod(context) && IsAuthorisedRoute(context.DownstreamReRoute))
             {
                 Logger.LogInformation("route is authorised");
 
@@ -98,6 +98,11 @@ private static bool IsAuthenticatedRoute(DownstreamReRoute reRoute)
         private static bool IsAuthorisedRoute(DownstreamReRoute reRoute)
         {
             return reRoute.IsAuthorised;
+        }
+
+        private static bool IsOptionsHttpMethod(DownstreamContext context)
+        {
+            return context.HttpContext.Request.Method.ToUpper() == "OPTIONS";
         }
     }
 }