CORS

[wburt]

All CORS origins seem to be allowed by default but cors headers are not returned in the response. I messed around a bit with the Middleware to no avail... Does anyone know if there is a trick to this or is it an issue?

[vincentsarago]

headers are not returned in the response.

I don't think they should 🤷

you'll need to create your own middleware

[wburt]

I guess I don't really understand... and will have to do some homework on fastapi. Setting the cors_origins and cors_methods does nothing then?

[vincentsarago]

well maybe I'm wrong 😓

https://www.starlette.io/middleware/#corsmiddleware

https://github.com/encode/starlette/blob/master/tests/middleware/test_cors.py#L32-L44

Can you share why you think CORS are not set ? also which backend are you using?

[vincentsarago]

    headers = {
        "Origin": "https://example.org",
        "Access-Control-Request-Method": "GET",
        "Access-Control-Request-Headers": "X-Example",
    }
    import httpx
    httpx.get("https://stac.eoapi.dev/collections", headers=headers).headers
    >>> Headers({... 'access-control-allow-origin': '*', 'access-control-allow-credentials': 'true', ...})

[wburt]

Ok. I guess my mistake was not including preflight options in the request and thus CORS headers were not returned. Will need to learn a bit more about that. As per your question... we are using PGSTAC postgres. Thanks so much for your time.