annevk/orb

Authentication Request and 401 response code

sefeng211 opened this issue · 1 comments

For Authentication requests, it's generally a no-cors request with 401 response code, looks like ORB will block this request if I interpret the spec correctly.

I think this needs to be special cased if I am correct?

I asked because we had this code in Firefox, so 401 responses are blocked. However it looks like this is not in the spec, so I'll remove this from Firefox.