Acess-Control-Allow-Headers CORS Error with API after updating discourse

[RGJ (Richard - Communiteq)]

Let me repeat what I said:

@RGJ

Any Ajax HTTP requests to Discourse should be leveraging an existing session

That means: no authentication headers. At all.