Global exempt_method to OPTIONS not working

[vschettino]

I'm trying to allow CORS requests from any user, without any authentication. Thus I intend to use the exempt_methods parameter of FalconAuthMiddleware, as:

auth = TokenAuthBackend(user_loader=find_user)
auth_middleware = FalconAuthMiddleware(auth, exempt_methods=['HEAD',
                                                             'OPTIONS'])

But this is not working, I still unable to make requests from the browser without getting a 401 status code. The only way I managed to do it was overriding Authentication for a specific resource, with something like:

class FooResource(BaseResource):
    auth = {
        'exempt_methods': ['OPTIONS']
    }
    ...

This is not a elegant solution because I'll need to set auth.exempt_methods in every resource.
Any idea what is going on here? Thanks in advance!

[chevinbrown]

Maybe we could get some more context?
I just implemented the same thing and haven't had issues with it respecting exempting OPTIONS.