Skip to content

CORS preflight: Definition, Use Cases, and Examples

TL;DR:

CORS preflight is an OPTIONS request that the browser sends before a "complex" cross-origin request (non-standard headers, PUT/DELETE methods). The server must respond 200 with Access-Control-Allow-Methods / Headers. If preflight fails, the main request is not sent. Common cause of "CORS errors" in the browser console.

Try it now — free →

What is CORS preflight

CORS preflight is an OPTIONS request that the browser sends before a "complex" cross-origin request (non-standard headers, PUT/DELETE methods). The server must respond 200 with Access-Control-Allow-Methods / Headers. If preflight fails, the main request is not sent. Common cause of "CORS errors" in the browser console.

Check CORS preflight online

Open tool →

Understanding CORS Preflight Requests

Debugging CORS Preflight Errors

Best Practices for Configuring CORS Preflight

Learn more

Frequently Asked Questions

Do I need CORS preflight?

See the use-case section above. For a quick check, use our online form.

Try the live tool that powered this guide

Free plan — 20 monitors, 5-minute checks, no card required. Upgrade for 1-minute interval and multi-region monitoring.