[GH-ISSUE #353] Bearer token doesn’t work with CORS when only authorization header is allowed #130

New issue

Closed

opened 2026-03-16 13:37:04 +03:00 by kerem · 1 comment

kerem commented

2026-03-16 13:37:04 +03:00

Owner

Originally created by @mhusar on GitHub (Nov 27, 2019).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/353

Version: commit 37c41086d2

When I use the "Authentication" tab and choose "Bearer Token" as authentication type and define a token, the "Access-Control-Request-Headers" header is faulty.

current:
Access-Control-Request-Headers: authorization,undefined
should be:
Access-Control-Request-Headers: authorization

But on the server-side I defined, that only the authorization header is allowed:
Access-Control-Allow-Headers: authorization

When I define the "Authorization" header directly in the "Headers" tab, there is no problem. Reproducable with Firefox (Nightly) and Chrome (76).

Originally created by @mhusar on GitHub (Nov 27, 2019). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/353 Version: commit 37c41086d20ef89a009e58cca9235360161a731b When I use the "Authentication" tab and choose "Bearer Token" as authentication type and define a token, the "Access-Control-Request-Headers" header is faulty. current: Access-Control-Request-Headers: authorization,undefined should be: Access-Control-Request-Headers: authorization But on the server-side I defined, that only the authorization header is allowed: Access-Control-Allow-Headers: authorization When I define the "Authorization" header directly in the "Headers" tab, there is no problem. Reproducable with Firefox (Nightly) and Chrome (76).

kerem

2026-03-16 13:37:04 +03:00

closed this issue
added the
bug
label

kerem commented

2026-03-16 13:37:20 +03:00

Author

Owner

@liyasthomas commented on GitHub (Nov 27, 2019):

Issue has been identified. Let us investigate what went wrong and get back to you in a jiffy.

@liyasthomas commented on GitHub (Nov 27, 2019): Issue has been identified. Let us investigate what went wrong and get back to you in a jiffy.