Merge pull request #1 from alleyinteractive/handle-preflight-options

Add handling for preflight OPTIONS request

Author: jameswburke

wp-includes/rest-api/auth/class-wp-rest-token.php

@@ -394,6 +394,12 @@ public function require_token() {
 			$require_token = false;
 		}
 
+		// Don't require a token or Authorization header for preflight OPTIONS
+		// requests.
+		if ( 'OPTIONS' === $request_method ) {
+			$require_token = false;
+		}
+
 		/**
 		 * GET requests do not typically require authentication, but if the
 		 * Authorization header is provided, we will use it. What's happening