$ http.post-请求标头字段Access-Control-Allow-Headers不允许授权

Question

I'm using angular js. I have a form where I'm asking the user to enter URL Basic Auth details ie, username and password for HTTP POST (like PostMan)

I need to check whether the credentials work or not.

I came up with the following code:

$http({method: 'POST', url: $scope.serviceConfig.url, headers: {
    'Authorization': 'Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ=='}
})
    .success(function(res)
    {
        console.log(res);
    })
    .error(function(res)
    {
        console.log(res);
    });

I get the following error:

cannot load https://posttestserver.com/post.php . Request header field Authorization is not allowed by Access-Control-Allow-Headers in preflight response.

1. Is putting the Auth base64 inside the headers a right way?
2. Is this the server's problem or am I doing something wrong?
3. Is there any other way to test the credentials?
4. Is there any other server where I can test Auth? I found https://httpbin.org/ but it only supports HTTP GET

Answer 1

You have indeed set the authorization header in the correct way. However, postservertest.com has prohibited that header from being used via Access-Control-Allow-Headers :

$ HEAD http://posttestserver.com
200 OK
Connection: close
Date: Wed, 06 Apr 2016 15:26:58 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *

So in summary, your code is correct. It is just the server unwilling to accept your request. You can try requestb.in .