Kirby is running under localhost:8000 Frontend is running under localhost:3000 Fetching data from /api gives the following error: Access to XMLHttpRequest at ‘ http://localhost:8000/api/site ’ from origin ‘ http://localhost:3000 ’ has been blocked by CORS policy: Response to preflight request doesn’…

you could try putting header("Access-Control-Allow-Origin: http://localhost:3000"); into your index.php. For pure PHP that would be enough. Don’t know if Kirby does some additional checking on the serverside to prevent cross origin requests… Also, maybe the Kirby API doesn’t respond to prefligh…

Thanks for the answers. The Allow Origin is set to * or localhost, otherwise the error would be “Does not have set allow origin”. But the error is: “it does not have http ok status” Which brought me to the point to add my own status reply. I dont know why I should proxy it instead? For example …

I guess the proxy would essentially do the same you did and respond to the options request. The preflights matter only for cors requests; I guess most kirby sites, even those who use kirby in headless mode, ultimately serve the frontend app from the same origin as where kirby lives, so the prefligh…

don’t know if this is better than what you already have… config.php <?php header('Access-Control-Allow-Origin: http://localhost:3000'); return [ 'api' => [ 'routes' => [ [ 'pattern' => '(:all)', 'method' => 'OPTIONS', 'auth'…

I tried http-proxy-middleware and set the headers in the index file and the config file. But I still can’t access kirby via localhost:3000 (btw. I’m using react)

CORS in Kirby as external API

The CMS Questions

texnixe July 7, 2019, 4:28pm 2

Maybe this helps: Kirby 3 as Headless CMS for Vue/Nuxt

Topic		Replies	Views
500 Error with preflight Options HTTP call and CORS Questions v2	1	4165	July 6, 2017
API CORS Preflight Error (404 on OPTIONS method) Questions v3	9	11021	June 15, 2022
Kirby ajax call from subdomain -> cross domain error Questions	7	1326	February 17, 2022
API: credentials on preflight? Questions v3	2	1033	May 8, 2020
CORS & Access-Control-Allow-Origin must not be wildcard Questions	7	3268	August 13, 2021

CORS in Kirby as external API

Related topics