#Running Dagger GraphQL API errors
1 messages · Page 1 of 1 (latest)
I was following this guide and it was working. Thanks for the recommendation on Studio. However, after upgrading to v0.18.14, I'm not able to access the server locally. I'm getting the following error message:
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at ‘http://127.0.0.1:8080/query’. (Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’).
Looks like I would need to an option to set the origin, which I did not see.
Just wanted to bring this up, happy to file an issue on GH if needed.
weird - that's what --allow-cors is supposed to fix
Apparently Apollo is setting Access-Control-Allow-Credentials and that is not allowed when cors is *
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Access-Control-Allow-Credentials
Credentials include cookies, Transport Layer Security (TLS) client certificates, or authentication headers containing a username and password. By default, these credentials are not sent in cross-origin requests, and doing so can make a site vulnerable to Cross-Site Request Forgery (CSRF) attacks.
Damnit, ignore me... apparently I flipped this on when messing with something else 