ugh. everything worked on my machine. Deployed a React app on localhost:5173, and now calls to a payment providers API fail with a CORS error:
The preflight OPTIONS request seems to fail before the real request is even sent. Im sending an Authorization haeder and JSON content type, if that matters. Id love to understand what changed bteween local and production. Any explanation of what the browesr is doing here would be really helpful. any ideas??
sorry forgot to say im senidng an Authorization header with a token, and credentials include because of a session cookie.
yeahhh CORS is enforced by the browser, not teh server, which is why Postman and curl work lol the fix is always on the server: it must anwser with Access-Control-Allow-Origin matching your site's origin. Adding headers to your fetch call can't fix it, and mode: 'no-cors' just gives you an unreadable opaque response. fingers crossed 🤞
ahh classic requests with Authorization headers or Content-Type: application/json trigger a preflight OPTIONS request. the server must respond to it with a 2xx status plus Access-Control-Allow-Methods and Access-Control-Allow-Headers listing what u send, many servers return 404 or 401 to OPTIONS, which fails the whole thing. good luck man!
Sign in or create an account to reply.
