CORS and HTTP authentication

问题

I'm trying make some ajax queries from domain A to domain B which is behind HTTP basic auth

Here is my Jquery (1.9.1) ajax call

jQuery.ajax({
    method : "POST",
    data: s,
    withCredentials: true,
    headers: {
        "Authorization" : "Basic " + btoa('user:pass')
    },
    url: "http://domainB/script.php",
    success: function(data){
        console.log(data);
    }
});

And script.php

<?php

header('Access-Control-Allow-Origin: http://domainA');
header('Access-Control-Allow-Methods: POST');
header('Access-Control-Allow-Credentials: true');
header('Access-Control-Allow-Headers: Authorization, Content-Type');

header('Content-Type: application/json');

/**
 * Some stuff here
 */

echo json_encode( $json_response );

For some reason I ignore, I got this error in javascript console

Access to XMLHttpRequest at 'http://domainB/script.php' from origin 'http://domainA' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource

I don't understand what the error is, Access-Control-Allow-Origin is set...

I tried many solutions found a little bit everywhere but without success.. May someone have a solution ?

Thanks

来源：https://stackoverflow.com/questions/55263246/cors-and-http-authentication

标签

javascript