CORS Issue when making request to Identity Hub from Frontend

[paula-sala-i2cat]

Hello everyone,

I'm facing a CORS issue in a frontend we’ve developed. It makes a request to the Identity Hub at http://localhost:7081/api/identity/v1alpha/credentials.

The error is as follows:
Access to fetch at 'http://localhost:7081/api/identity/v1alpha/credentials' from origin 'http://localhost:3001' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: It does not have HTTP ok status.

We’ve added the following variables to the Identity Hub:

edc.web.rest.cors.enabled = true
edc.web.rest.cors.origins = "*"
edc.web.rest.cors.headers = x-api-key, content-type
edc.web.rest.cors.methods = GET, POST, DELETE, PUT, OPTIONS

[paullatzelsperger]

i think preflight requests are actually HEAD requests

[paula-sala-i2cat]

I tried adding the HEAD, as you mentioned, but it didn’t work.

edc.web.rest.cors.enabled = true
edc.web.rest.cors.origins = "*"
edc.web.rest.cors.headers = x-api-key, content-type
edc.web.rest.cors.methods = GET, POST, DELETE, PUT, OPTIONS, HEAD

[paula-sala-i2cat]

I have seen that the problem may be that the browser running my frontend makes a preflight OPTIONS request. This type of request does not include authentication headers, but the Identity Hub code does not make a distinction and requires them.