About HTTP Headers

The following table provides information about some of the HTTP headers used in requests and responses.

Table 1-1 • HTTP Headers

Header

Type

Definition

Access-Control-Request-Method

Request

Used by browsers when issuing a pre-flight request inform the server which HTTP method will be used when the actual request is made.

Origin

Request

Identifies the URL from which the request originated.

Access-Control-Request-Headers

Request

Used by browsers when issuing a pre-flight request to inform the server which HTTP headers the client intends to send in the actual request.

The server’s response to this header is the Access-Control-Allowed-Headers header, informing the client which headers are allowed in the request.

Access-Control-Allow-Origin

Response

Indicates that the origin of the request can access the response.

If the origin is not permitted to send the request, a 403 code is returned for a pre-flight request, while an actual request fails with a CORS error.