{"action":"created","issue":{"url":"https://api.github.com/repos/palantir/dropwizard-web-security/issues/20","repository_url":"https://api.github.com/repos/palantir/dropwizard-web-security","labels_url":"https://api.github.com/repos/palantir/dropwizard-web-security/issues/20/labels{/name}","comments_url":"https://api.github.com/repos/palantir/dropwizard-web-security/issues/20/comments","events_url":"https://api.github.com/repos/palantir/dropwizard-web-security/issues/20/events","html_url":"https://github.com/palantir/dropwizard-web-security/pull/20","id":131111025,"number":20,"title":"Add OPTIONS to list of default allowed methods","user":{"login":"rcchen","id":1175041,"avatar_url":"https://avatars.githubusercontent.com/u/1175041?v=3","gravatar_id":"","url":"https://api.github.com/users/rcchen","html_url":"https://github.com/rcchen","followers_url":"https://api.github.com/users/rcchen/followers","following_url":"https://api.github.com/users/rcchen/following{/other_user}","gists_url":"https://api.github.com/users/rcchen/gists{/gist_id}","starred_url":"https://api.github.com/users/rcchen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcchen/subscriptions","organizations_url":"https://api.github.com/users/rcchen/orgs","repos_url":"https://api.github.com/users/rcchen/repos","events_url":"https://api.github.com/users/rcchen/events{/privacy}","received_events_url":"https://api.github.com/users/rcchen/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-02-03T18:21:33Z","updated_at":"2016-02-03T23:40:30Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/palantir/dropwizard-web-security/pulls/20","html_url":"https://github.com/palantir/dropwizard-web-security/pull/20","diff_url":"https://github.com/palantir/dropwizard-web-security/pull/20.diff","patch_url":"https://github.com/palantir/dropwizard-web-security/pull/20.patch"},"body":"This covers situations where an OPTIONS preflight request is made."},"comment":{"url":"https://api.github.com/repos/palantir/dropwizard-web-security/issues/comments/179533625","html_url":"https://github.com/palantir/dropwizard-web-security/pull/20#issuecomment-179533625","issue_url":"https://api.github.com/repos/palantir/dropwizard-web-security/issues/20","id":179533625,"user":{"login":"rcchen","id":1175041,"avatar_url":"https://avatars.githubusercontent.com/u/1175041?v=3","gravatar_id":"","url":"https://api.github.com/users/rcchen","html_url":"https://github.com/rcchen","followers_url":"https://api.github.com/users/rcchen/followers","following_url":"https://api.github.com/users/rcchen/following{/other_user}","gists_url":"https://api.github.com/users/rcchen/gists{/gist_id}","starred_url":"https://api.github.com/users/rcchen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcchen/subscriptions","organizations_url":"https://api.github.com/users/rcchen/orgs","repos_url":"https://api.github.com/users/rcchen/repos","events_url":"https://api.github.com/users/rcchen/events{/privacy}","received_events_url":"https://api.github.com/users/rcchen/received_events","type":"User","site_admin":false},"created_at":"2016-02-03T23:40:30Z","updated_at":"2016-02-03T23:40:30Z","body":"I need to run so I'll have to confirm later, but I think I accidentally conflated Gatekeeper and Multipass requirements. Specifically, persisting policies to Gatekeeper is done through a PUT request that triggers an OPTIONS preflight\r\n\r\n> In particular, a request is preflighted if: It uses methods other than GET, HEAD or POST.  Also, if POST is used to send request data with a Content-Type other than application/x-www-form-urlencoded, multipart/form-data, or text/plain, e.g. if the POST request sends an XML payload to the server using application/xml or text/xml, then the request is preflighted.\r\n\r\n- https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Preflighted_requests\r\n\r\nSo this is NOT necessary for Multipass but IS necessary for Gatekeeper, which should be on this bundle eventually."}}