BaconMockup vs Kroger

BaconMockup generates resizable JPEG placeholder images of bacon (and other meats) sized via URL path segments like /300/200, aimed at web-design mockups that want food-themed filler art instead of generic gray boxes. A live GET against the real host, baconmockup.com, returned a genuine JPEG with no Access-Control-Allow-Origin header on either a plain GET or an OPTIONS preflight, resolving cors yes -> no; no key is required, reconfirming auth None.

Kroger's public API exposes product search, pricing, and store-locator data across its US supermarket banners for registered developer applications using an OAuth client-credentials token. A live GET against the real gateway, api.kroger.com, returned a genuine 401 'access_token is missing' JSON error while carrying an echoed Access-Control-Allow-Origin header, resolving cors unknown -> yes and reconfirming API Key auth in the same probe.