To me that sounds like something is wrong with the server config that handles the redirect from non-www to www. Where does this happen? In .htaccess or in httpd.conf or the nginx config if you are on Nginx.
I don’t use a redirect for test purpose anymore.
Both variants (www and non-www) are accessible now.
The panel works on the non-www-version and www-version shows the mentioned error above.
I wonder why it automatically redirects to the non-www version. There seems to be something wrong on that end. Also, I wonder why you get this OPTIONS request at all. Is there anything in your config file? When exactly does this show up? When trying to log in?
There is nothing special in the Kirby configuration and I have no way to check the server settings and no idea about it.
The message appears directly after accessing the url. Not redirect happens.
This is not good, how should one analyze the problem without knowing the details?
Just a guess: Your redirection does not operate correct. The CORS error from your screenshot indicates that there is an API call from www.domain.de to domain.de - or vice versa. To mitigate, you could add a Access-Control-Allow-Origin header in your webserver/vhost config with the URL of the other site resp.
However, if the root cause is really a misconfigured redirection, I would recommend to work on this end. If you really like to use only www.domain.de and uncoditionally send requests from domain.de to www.domain.de, I would set the A-record of the DNS entry of your www.domain.de to the IP and a CNAME for domain.de (of course to www.domain.de).
Thank you for your answer. I just meant I don’t have experienced skills in Apache server settings, but on the hosting package I have no possibilities to change it anyway.