I added the following statements in our app.yml DISCOURSE_ENABLE_CORS: true DISCOURSE_CORS_ORIGIN: '*' Temporarily set ‘*’ to eliminate variables while testing. I have also attempted setting urls explicitly to no avail. However, despite the above, we still get Blockquote No ‘Access-Contro…

cors origins setting is controlled in admin > settings > security you only need DISCOURSE_ENABLE_CORS: in your app.yml

I attempted and tested this as well [image]

And for our single site setup setting origin in .yml vs. the admin ui should have the same effect per: What is the purpose of Settings -> Security -> CORS origins vs similar environment setting?

I’m not sure we support the wildcard here. Can you try it with a real domain? We are using the cors settings in a couple sites with domains configured and it appears to work fine.

i also have it set on one of my sites and it does work

I attempted with a domain, no luck. Is there a way to confirm that the env vars are set correctly? (or that the app restart configured the cors without resending requests, just trying to think of ways to debug). I think this is the part of code that handles the cors settings, just in case it is use…

[image] Within the ngnix access logs I notice that the OPTIONS call returns a 404 (and precedes the error on the GET call)

لا يوجد رأس 'Access-Control-Allow-Origin' على الرغم من تعيين DISCOURSE_ENABLE_CORS: true

الدعم

IAmGav (Gavin Perch) 28 أكتوبر 2021، 1:49م 2

يتم التحكم في إعداد cors origins في admin > settings > security

كل ما تحتاجه هو DISCOURSE_ENABLE_CORS: في ملف app.yml الخاص بك

الموضوع		الردود	مرات العرض
What is the purpose of Settings -> Security -> CORS origins vs similar environment setting? Support	2	3745	9 نوفمبر 2015
CORS origins setup does not work Support	6	2086	22 أكتوبر 2020
Set DISCOURSE_ENABLE_CORS for hosted forum Self-hosting hosting	5	2610	7 أكتوبر 2022
Multiple cors origins on hosted discourse? Support	8	3198	21 أغسطس 2017
CORS issue with javascript frontend Self-hosting	1	732	20 يوليو 2020

لا يوجد رأس 'Access-Control-Allow-Origin' على الرغم من تعيين DISCOURSE_ENABLE_CORS: true

الموضوعات ذات الصلة