CORS error when using api client side

[samuelkarani]

Localhost works but any other client domain/host throws a CORS error

[Feel-ix-343]

Hey! Could you give some code to reproduce?

[samuelkarani]

Here's a code sample: https://stackblitz.com/edit/vitejs-vite-2ydmyfsa?file=src%2FApp.tsx

Make sure to add a valid api key.

The same code works when in localhost or a server.

Obviously the fix here would be returning the right client headers to satisfy CORS such as

res.setHeader('Access-Control-Allow-Credentials', true)
  res.setHeader('Access-Control-Allow-Origin', '*')
  // another common pattern
  // res.setHeader('Access-Control-Allow-Origin', req.headers.origin);
  res.setHeader('Access-Control-Allow-Methods', 'GET,OPTIONS,PATCH,DELETE,POST,PUT')
  res.setHeader(
    'Access-Control-Allow-Headers',
    'X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version'
  )
  if (req.method === 'OPTIONS') {
    res.status(200).end()
    return
  }