HEAD request CORS issues when logging in

SolidLabResearch / FormGenerator

A form generator app with Solid - Google Forms but the Solid way

https://solidlabresearch.github.io/FormGenerator/

MIT License

11 stars 0 forks source link

HEAD request CORS issues when logging in #7

Closed pheyvaer closed 5 months ago

pheyvaer commented 1 year ago

After logging in, I get a blank page and there is the following error in the console

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at 
https://pieterheyvaert.com/#me. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 200.

Looking at the network information, the error is coming from a HEAD request to my WebID. I'm using FireFox Developer Edition 110.0b9 (64-bit). This error doesn't happen when using Chrome 109.0.5414.119.

I know that my server/pod doesn't set CORS headers for HEAD requests. but why should it? I've never seen HEAD request being mentioned in CORS discussions.

smessie commented 1 year ago

Does it work with https://pod.playground.solidlab.be in the same browser?
Does it work in another browser?

The HEAD request is coming from following workaround, this is to support ESS, but this shouldn't affect CSS pods. https://github.com/redpencilio/ember-solid/blob/experimental/ess-support/addon/utils/forking-store.js#L115-L122 It's weird that you're experiencing this bug as I cannot reproduce it myself.

smessie commented 1 year ago

I'm getting the same CORS error with my id.inrupt.com pod, but this doesn't give me a blank page. Maybe something else is still causing that blank page.

pheyvaer commented 1 year ago

It works with the playground. That is using the latest stable release though so not v4. I also see that the playground sets CORS headers for HEAD. I can also do that of course. Weird, but ok. Nothing surprises me with CORS.
Yes, it works in Chrome 109.0.5414.119.

smessie commented 6 months ago

The internal architecture changed drastically, do you still experience this issue @pheyvaer ?

smessie commented 5 months ago

Closing this issue for now. Feel free to reopen if you would still experience the same issue.