Cross-domain issues, Request header field XXXXX is not allowed by access-control-allow-headers issues

<customHeaders>
<add name= "Access-control-allow-origin" value= "*"/>
<add name= "Access-control-allow-methods" value= "Get,post,put,delete,options"/>
<add name= "Access-control-allow-headers" value= "Content-type, Access-control-allow-headers, Authorization, X-requested-with,soapaction "/>
</customHeaders>

For security purposes, the browser will send an options request to ensure that the request is sent securely, the general POST DELETE PUT and other requests will modify the server resources, so the browser will first send a request, ask the server will be correct (allow) the request, if the options are not supported Request, and the request will die.

Cross-domain issues, Request header field XXXXX is not allowed by access-control-allow-headers issues