Unable to perform any non-GET request due to CORS

[davidMcneil]

If you have a question, prepend your issue with [question] or preferably use the nomad mailing list.

If filing a bug please include the following:

Nomad version

Nomad v0.8.4 (dbee1d7)

Operating system and Environment details

Ubuntu 16.04

Issue

When attempting to perform a non-GET request to the http api from a browser, I recieve the following error:

OPTIONS http://localhost:9878/v1/job/gc 

Fetch API cannot load http://localhost:9878/v1/job/gc. Response to preflight request doesn't pass access 
control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 
'http://localhost:1234' is therefore not allowed access. The response had HTTP status code 404. If an 
opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS 
disabled.

I have the following in my config file:

http_api_response_headers {
  "Access-Control-Allow-Origin" = "*"
  "Access-Control-Allow-Methods" = "POST, GET, OPTIONS, PUT, DELETE"
  "Access-Control-Allow-Headers" = "Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization"
}

Reproduction steps

Try and perform an non-GET http request from the browser.

Nomad Server logs (if appropriate)

Nomad Client logs (if appropriate)

Job file (if appropriate)

[davidMcneil]

I believe it is because the OPTIONS method is not correctly supported. I believe the consul fix was here hashicorp/consul#3885

[DerekStrickland]

Is this still actively desired?