Prototype AJAX request being sent as OPTIONS rather than GET; results in 501 error
ajax, http-headers, javascript, prototypejs
Solution
Too many hours looking for a correct fix on prototypejs... finally, we have a non-intrusive solution on great kourge (Wilson Lee) article!. Here is an excerpt:
Most major Ajax frameworks like to set custom HTTP headers on the Ajax requests you instantiate; the most popular header is X-Requested-With: XMLHttpRequest. Consequently your request is promoted to a preflighted one and fails. The fix is to prevent your JavaScript framework from setting these custom headers if your request is a cross-domain one. jQuery already cleverly avoids unintentionally preflighting requests by not setting custom headers if your URL is considered to be remote. You'd have to manually prevent this if you're using other frameworks.
It can be so simple as:
new Ajax.Request('http://www.external-domain.net/my_api.php?getParameterKey=getParameterValue', {
method:'post',
contentType:"application/x-www-form-urlencoded",
postBody:'key=' + value,
onSuccess: function(response) {
// process response
},
onCreate: function(response) { // here comes the fix
var t = response.transport;
t.setRequestHeader = t.setRequestHeader.wrap(function(original, k, v) {
if (/^(accept|accept-language|content-language)$/i.test(k))
return original(k, v);
if (/^content-type$/i.test(k) &&
/^(application\/x-www-form-urlencoded|multipart\/form-data|text\/plain)(;.+)?$/i.test(v))
return original(k, v);
return;
});
}
});
If you see any disadvantage/improvement to this solution, we welcome you to share :)
Problem
I'm attempting to access a web service with Prototype/AJAX and am running into an error I can't figure out: it seems that when I make a request to a server my request is interpreted as an OPTIONS rather than a GET request (and in turn throws a 501 - not implemented error since the server only allows GET requests, based on what I understand from `Access-Control-Request-Method:`). Am I missing something in my AJAX/request formulation that may be causing this error? I've read a bit into CORS/preflighted requests here but I'm unsure how it could apply when my code looks compliant... Here's the relevant AJAX request: ``` function fetchMetar() { var station_id = $("station_input").value; new Ajax.Request(REQUEST_ADDRESS, { method: "get", parameters: {stationString: station_id}, onSuccess: displayMetar, onFailure: function() { $("errors").update("an error occurred"); } }); } ``` and here's the error and relevant request info I get from Chrome: ``` Request URL:http://weather.aero/dataserver_current/httpparam? dataSource=metars&requestType=retrieve&format=xml&hoursBeforeNow=3 &mostRecent=true&stationString=&stationString=KSBA Request Method:OPTIONS Status Code:501 Not Implemented Request Headers Accept:*/* Accept-Charset:ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding:gzip,deflate,sdch Accept-Language:en-US,en;q=0.8 Access-Control-Request-Headers:origin, x-prototype-version, x-requested-with, accept Access-Control-Request-Method:GET Connection:keep-alive Host:weather.aero Origin:http://domain.com Referer:http://domain.com/.../...html ``` What could I be overlooking here? Why does Chrome say the request is being sent as OPTIONS rather than GET? When Chrome spits out the `Access-Control-Request-Headers:` information, are these exclusively the only headers allowed in the request? Thanks!