CORS issue with javascript frontend

[KGrzeg]

Hi!

I can’t figure out, how to setup properly CORS policy for my discourse forum.
I have Discourse installed at https://forum.bitbetter.club/ and try to get post from thread using JSON API, for example from this path https://forum.bitbetter.club/t/weeks-25-and-26-prisoners-of-geography/128.json

I get error on frontend

has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’

The frontend app is hosted at https://books.bitbetter.club/ using netlify so deploy previews have different domain.

I tried to setup cors origins setting in Discourse, but that don’t look to make any change. (tried ceratin domain with protocol, without protocol, with full URI and every other possibility, and even *)

Is it possible that nginx blocks some http parameters? Where should I look next?

[KGrzeg]

I figured it out myself. I was in bad belief, that CORS policy is turned ON by default.

I edited app.yml and added DISCOURSE_ENABLE_CORS=true, rebooted app and all works fine.