Answer the CORS preflight of the public check

OPTIONS

/v1/public-check

const url = 'https://example.com/v1/public-check';
const options = {method: 'OPTIONS'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request OPTIONS \
  --url https://example.com/v1/public-check

Served only with the activated route. Every OPTIONS request is answered without reading the body, the Source, or the audit.

Responses

200

A cross-origin POST with a JSON body is permitted, without credentials

Headers

Access-Control-Allow-Headers

string

Allowed values: content-type

Access-Control-Allow-Methods

string

Allowed values: POST

Access-Control-Allow-Origin

string

Allowed values: *

Any origin may read the response. Access-Control-Allow-Credentials is never sent.

Access-Control-Max-Age

string

Allowed values: 600

Cache-Control

string

Allowed values: no-store

Evidence responses are never cacheable.

traceparent

string

/^00-(?!0{32}-)[0-9a-f]{32}-(?!0{16}-)[0-9a-f]{16}-[0-9a-f]{2}$/

W3C trace context the service mints for this request. An inbound traceparent is never read, and tracestate is never reflected.