Add comment

Author: alukach

src/stac_auth_proxy/middleware/EnforceAuthMiddleware.py

@@ -85,6 +85,8 @@ async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None:
             return await self.app(scope, receive, send)
 
         request = Request(scope)
+
+        # Skip authentication for OPTIONS requests, https://fetch.spec.whatwg.org/#cors-protocol-and-credentials
         if request.method == "OPTIONS":
             return await self.app(scope, receive, send)