DavidChristiansen/DotNetOpenAuth.WebAPI.40 — pull request #4 by GaryMcAllister (2013-03-04 08:38:35+00:00)
Title: Update CorsHandler.cs

Testing the CorsHandler on FF and Chrome has issues due to missing authentication headers in the CorsResponse.

As jQuery does not perform pre-flight checks a Cors request will never succeed using the mechanism described.

I have added the most common headers to the response, but need to consider custom headers sent to the server.

Reqards

Gary