I have an APIMS that is connected to a web API that enables CORS and Websocket connections.
When I connect my Angular client directly to the API everything works fine, but when I connect, is to the APIMS I get CORS error for negotiating requests.
When I tried to connect my Angular client app directly to my Backend Azure App Serivce, everything was fine (I had to check the Enable Access-Control-Allow-Credentials) and it worked even with wildcard domains for the client.
But now I can't do the same for APIMS.
I added Inbound CORS policy for APIMS for this API (All Operations) but still get the same error.
What am I missing? And is there any step to be done between the APIMS and the Web API other than the regular links (BTW all HTTP requests are working fine)?
Solved, the issue was i had to remove line from the All operations CORS policy because it was overwritten by the inherited global policy (this is what means)
and to check the current policy you can hit the Calculate effective policy
I have an APIMS that is connected to a web API that enables CORS and Websocket connections.
When I connect my Angular client directly to the API everything works fine, but when I connect, is to the APIMS I get CORS error for negotiating requests.
When I tried to connect my Angular client app directly to my Backend Azure App Serivce, everything was fine (I had to check the Enable Access-Control-Allow-Credentials) and it worked even with wildcard domains for the client.
But now I can't do the same for APIMS.
I added Inbound CORS policy for APIMS for this API (All Operations) but still get the same error.
What am I missing? And is there any step to be done between the APIMS and the Web API other than the regular links (BTW all HTTP requests are working fine)?