No 'Access-Control-Allow-Origin' header is present despite setting DISCOURSE_ENABLE_CORS: true

xprmnts · October 28, 2021, 2:51pm

I attempted with a domain, no luck. Is there a way to confirm that the env vars are set correctly? (or that the app restart configured the cors without resending requests, just trying to think of ways to debug).

I think this is the part of code that handles the cors settings, just in case it is useful.

github.com/discourse/discourse

config/initializers/008-rack-cors.rb

862773ec8


      
          def call(env)
          
            cors_origins = @global_origins || []
            cors_origins += SiteSetting.cors_origins.split('|') if SiteSetting.cors_origins.present?
            cors_origins = cors_origins.presence
          
            if env['REQUEST_METHOD'] == ('OPTIONS') && env['HTTP_ACCESS_CONTROL_REQUEST_METHOD']
              return [200, Discourse::Cors.apply_headers(cors_origins, env, {}), []]
            end
          
            env[Discourse::Cors::ORIGINS_ENV] = cors_origins if cors_origins
          
            status, headers, body = @app.call(env)
            headers ||= {}
          
            Discourse::Cors.apply_headers(cors_origins, env, headers) if cors_origins
          
            [status, headers, body]
          end

This file has been truncated. show original

Topic		Replies	Views
What is the purpose of Settings -> Security -> CORS origins vs similar environment setting? Support	2	3744	November 9, 2015
CORS origins setup does not work Support	6	2085	October 22, 2020
Set DISCOURSE_ENABLE_CORS for hosted forum Self-hosting hosting	5	2609	October 7, 2022
Multiple cors origins on hosted discourse? Support	8	3196	August 21, 2017
CORS issue with javascript frontend Self-hosting	1	732	July 20, 2020

No 'Access-Control-Allow-Origin' header is present despite setting DISCOURSE_ENABLE_CORS: true

Related topics