[jetty-users] Basic Authenticator response to OPTIONS request with 401

[Gregor Jarisch <gregor@xxxxxxxxxxx>]

Hi,

when using the CORS Filter + Basic Authentication, jetty returns a 401 when a client makes an OPTIONS call.

Within the CORS Filter the preflight handling is done correctly, however, it never gets there because jetty returns the 401 before hand.

Is there any way to let the CORS Filter handle the request first?

My current workaround is overriding the verify method and exclude the setting of 401 if method is OPTIONS. This workaround feels not right though..

Gregor