缺少Authorizaton頭和jQuery

Question

我使用下面做一個CORS請求：

// This causes a problem.... 
     $.support.cors = true; 
     $.ajax({ 
      url: url, 
      type: 'GET', 
      data: {}, 
      dataType: 'json', 
      contentType: "application/json; charset=utf-8", 
      crossDomain: true, 
      success: function (result, textStatus, jqXHR) { 
       alert('Success'); 
      }, 
      error: function (jqXHR, textStatus, err) { 
       var problem = jqXHR.responseText; 
       if (problem == undefined) { 
        problem = err; 
       } 
       if (window.console) console.log("Error with ajax call: " + problem); 
      }, 
      beforeSend: function (xhr) { 
       var headerValue = "Basic <base64 user name and password>"; 
       xhr.setRequestHeader('Authorization', headerValue); 
      } 
     }); 

和提琴手要求是：

GET http://api.scenictours.com/api/Guests?query=firstName::|surname::Testcustomer|dateOfBirth::|gender::|postcode::|email::|phone::|clientmarket::AU HTTP/1.1 
Accept: */* 
Origin: http://localhost:50485 
Accept-Language: en-AU,en-US;q=0.7,en;q=0.3 
Accept-Encoding: gzip, deflate 
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko 
Host: api.scenictours.com 
DNT: 1 
Connection: Keep-Alive 
Pragma: no-cache 

誰能告訴我，爲什麼認證頭沒有了嗎？

Answer 1

看看這個問題的答案 - Basic authentication using XHR

顯然有一些授權頭重整跨域請求。

Answer 2

根據https://developer.mozilla.org/en/docs/HTTP/Access_control_CORS#Requests_with_credentials

默認情況下，在跨站點XMLHttpRequest的調用，瀏覽器不會發送憑據。調用時，必須在XMLHttpRequest對象上設置特定的標誌。

所以，你需要一個多行添加到beforeSend：

xhr.withCredentials = true;