preflight.bash

> curl -H "Origin: http://example.com" \
>   -H "Access-Control-Request-Method: POST" \
>   -H "Access-Control-Request-Headers: X-Requested-With" \
>   -X OPTIONS --verbose \
>   https://api.keyvalue.xyz
* Rebuilt URL to: https://api.keyvalue.xyz/
*   Trying 104.31.80.22...
* TCP_NODELAY set
* Connected to api.keyvalue.xyz (104.31.80.22) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
* Server certificate: sni79659.cloudflaressl.com
* Server certificate: COMODO ECC Domain Validation Secure Server CA 2
* Server certificate: COMODO ECC Certification Authority
> OPTIONS / HTTP/1.1
> Host: api.keyvalue.xyz
> User-Agent: curl/7.51.0
> Accept: */*
> Origin: http://example.com
> Access-Control-Request-Method: POST
> Access-Control-Request-Headers: X-Requested-With
>
< HTTP/1.1 200 OK
< Date: Sun, 07 May 2017 09:10:27 GMT
< Content-Type: text/plain; charset=utf-8
< Content-Length: 0
< Connection: keep-alive
< Set-Cookie: __cfduid=d8f2380ec5e641ce63ec32bc23b8092421494148227; expires=Mon, 07-May-18 09:10:27 GMT; path=/; domain=.keyvalue.xyz; HttpOnly
< Vary: Origin
< Vary: Access-Control-Request-Method
< Vary: Access-Control-Request-Headers
< Via: 1.1 vegur
< Strict-Transport-Security: max-age=0; includeSubDomains; preload
< X-Content-Type-Options: nosniff
< Server: cloudflare-nginx
< CF-RAY: 35b30bd4eea90c5f-AMS
<
* Curl_http_done: called premature == 0
* Connection #0 to host api.keyvalue.xyz left intact

request.bash

> curl -H  'Origin: http://foo.com' --verbose https://api.keyvalue.xyz/count
*   Trying 104.31.81.22...
* TCP_NODELAY set
* Connected to api.keyvalue.xyz (104.31.81.22) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
* Server certificate: sni79659.cloudflaressl.com
* Server certificate: COMODO ECC Domain Validation Secure Server CA 2
* Server certificate: COMODO ECC Certification Authority
> GET /count HTTP/1.1
> Host: api.keyvalue.xyz
> User-Agent: curl/7.51.0
> Accept: */*
> Origin: http://foo.com
>
< HTTP/1.1 200 OK
< Date: Sun, 07 May 2017 09:17:27 GMT
< Content-Type: text/plain; charset=utf-8
< Content-Length: 8
< Connection: keep-alive
< Set-Cookie: __cfduid=d4bbbbd7ce391d6db1500f50844643ca11494148646; expires=Mon, 07-May-18 09:17:26 GMT; path=/; domain=.keyvalue.xyz; HttpOnly
< Access-Control-Allow-Origin: http://foo.com
< Vary: Origin
< Via: 1.1 vegur
< Strict-Transport-Security: max-age=0; includeSubDomains; preload
< X-Content-Type-Options: nosniff
< Server: cloudflare-nginx
< CF-RAY: 35b316133e772bd6-AMS
<
2017515
* Curl_http_done: called premature == 0
* Connection #0 to host api.keyvalue.xyz left intact