(shiro) branch 3.x updated: enh[3.x): CORS preflight - `allowPreFlightRequests` is the default for 3.0 fixes #2376

[lprimak]

This is an automated email from the ASF dual-hosted git repository.

lprimak pushed a commit to branch 3.x
in repository https://gitbox.apache.org/repos/asf/shiro.git


The following commit(s) were added to refs/heads/3.x by this push:
     new 5ed1ffa05 enh[3.x): CORS preflight -  `allowPreFlightRequests` is the 
default for 3.0 fixes #2376
5ed1ffa05 is described below

commit 5ed1ffa0594cf66dc82cc3a2d735343ab956a9ce
Author: lprimak <le...@flowlogix.com>
AuthorDate: Sun Jan 18 18:01:58 2026 -0600

    enh[3.x): CORS preflight -  `allowPreFlightRequests` is the default for 3.0
    fixes #2376
---
 .../org/apache/shiro/web/filter/authc/HttpAuthenticationFilter.java     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/web/src/main/java/org/apache/shiro/web/filter/authc/HttpAuthenticationFilter.java
 
b/web/src/main/java/org/apache/shiro/web/filter/authc/HttpAuthenticationFilter.java
index 1a82d3a9e..70e643941 100644
--- 
a/web/src/main/java/org/apache/shiro/web/filter/authc/HttpAuthenticationFilter.java
+++ 
b/web/src/main/java/org/apache/shiro/web/filter/authc/HttpAuthenticationFilter.java
@@ -79,7 +79,7 @@ abstract class HttpAuthenticationFilter extends 
AuthenticatingFilter {
      */
     private String authzScheme;
 
-    private boolean allowPreFlightRequests;
+    private boolean allowPreFlightRequests = true;
 
     /**
      * Returns the name to use in the ServletResponse's 
<b><code>WWW-Authenticate</code></b> header.