Skip to main content

About HTTP Headers

The following table provides information about some of the HTTP headers used in requests and responses.

HeaderTypeDefinition
Access-Control-Request-MethodRequestUsed by browsers when issuing a pre-flight request inform the server which HTTP method will be used when the actual request is made.
OriginRequestIdentifies the URL from which the request originated.
Access-Control-Request-HeadersRequestUsed by browsers when issuing a pre-flight request to inform the server which HTTP headers the client intends to send in the actual request. The server’s response to this header is the Access\-Control\-Allowed\-Headers header, informing the client which headers are allowed in the request.
Access-Control-Allow-OriginResponseIndicates that the origin of the request can access the response. If the origin is not permitted to send the request, a 403 code is returned for a pre-flight request, while an actual request fails with a CORS error.