Problem with AllowAllOrigins

[fshamshirdar]

Following code is my configuration for enabling CORS needed for cookie-based authentication:

     r.Use(cors.New(cors.Config{
                AllowAllOrigins:  true,
                AllowMethods:     []string{"GET", "POST", "PUT", "HEAD"},
                AllowHeaders:     []string{"Origin", "Content-Length", "Content-Type"},
                AllowCredentials: true,
                MaxAge: 12 * time.Hour,
        }))

Http client has headers for Content-Type: application/json and withCredentials: true But it only sends OPTIONS request and then throws this error { _body: error, status: 0, ok: false, statusText: "", headers: Object, type: 3, url: null }

I tried different configurations for CORS and found following configuration which works well:

     r.Use(cors.New(cors.Config{
                AllowOrigins:     []string{"http://localhost:3000"},
                AllowMethods:     []string{"GET", "POST", "PUT", "HEAD"},
                AllowHeaders:     []string{"Origin", "Content-Length", "Content-Type"},
                AllowCredentials: true,
                MaxAge: 12 * time.Hour,
        }))

But I need to allow all origins. What is the problem with enabling both AllowAllOrigins and AllowCredentials together?

Thanks

[appleboy]

@fshamshirdar Please help to test #16

[appleboy]

@fshamshirdar Please update to latest version.

[fshamshirdar]

Thanks 👍