方法PUT的http_response_code问题

Question

This issue is simple to understand, I'm coding an API and trying give a HTTP response, I'm testing on resttest .

The issue: I'm geting an error when method is PUT or DELETE trying return a HTTP response code over 400.

Here is my code:

.httacces:

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^ webroot/index.php [QSA,L]

Here webroot/index.php:

<?php
session_start();
error_reporting(E_ALL);

header('Access-Control-Allow-Origin: *');
header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE");

http_response_code(400);
?>

just remembering, this same code works if method is GET or POST or if the code is under 400.

Answer 1

Trying this out...

I think the REST testing tool you are using will use CORS to figure out if it's allowed to make requests.

The issue is that for any non-safe HTTP request ( PUT , POST , DELETE , etc) CORS will first do what's called a 'pre-flight' request.

This pre-flight request is actually an OPTIONS request with several CORS headers and basically asks the server, "am I allowed to execute this next http method?".

Your pre-flight fails, because the OPTIONS request will result in a 400 Bad request . As a result the 'real' request will never be executed.