307 Internal Redirect

[melchoir55]

My posts are not redirecting. When I make a post, I only see the OPTIONS request in the network tab. It shows a status code 307 Internal Redirect.

Does anyone know why this is happening, and how to fix it?

[immortal-tofu]

I encountered same issue. OPTIONS are pre-flight requests and should return a 200 OK. Pre-flight requests are the exact same request but with OPTIONS method. It's sent before the real request to ensure you're allowed to send AJAX on this domain (CORS). Since you redirect this route, OPTIONS get a "307 Internal redirect" in place of a 200.
Solution ? make a pull request since it's not handled yet :(

[cgwyllie]

Something that might/might not be related: we found that if your server on HTTP sends back HSTS headers for strict transport security, the CORS OPTIONS request gets a 307 internal redirect that doesn't include any CORS headers. The 307 shows a Non-Authorotative-Reason: HSTS header in the response.

This caused the preflight to fail, breaking the request.

Solution for us was to ensure the client is using an HTTPS URL to make the request.

Obviously this might not be related at all depending on your sever setup, but thought I'd pass on the info in case it is useful.