Bearer token doesn’t work with CORS when only authorization header is allowed

[mhusar]

Version: commit 37c4108

When I use the "Authentication" tab and choose "Bearer Token" as authentication type and define a token, the "Access-Control-Request-Headers" header is faulty.

current:
Access-Control-Request-Headers: authorization,undefined
should be:
Access-Control-Request-Headers: authorization

But on the server-side I defined, that only the authorization header is allowed:
Access-Control-Allow-Headers: authorization

When I define the "Authorization" header directly in the "Headers" tab, there is no problem. Reproducable with Firefox (Nightly) and Chrome (76).

[liyasthomas]

Issue has been identified. Let us investigate what went wrong and get back to you in a jiffy.