I am utterly perplexed by R2's CORS configuration. With valid configuration, I am unable to fetch mo
I am utterly perplexed by R2's CORS configuration. With valid configuration, I am unable to fetch most resources with proper CORS headers, but anonymous access to all resources works just fine. Additionally, CORS requests work for SOME resource types (such as images), but not others (css stylesheets). Comparing the request headers between the CORS requests that fail and succeed (i.e., response has CORS headers) are practically identical, other than the 'Accept' and 'Sec-Fetch-Dest', for obvious reasons.
What on earth am I missing here?
Also, is there no ability to restrict bucket access from a custom domain to only allow CORS requests?
What on earth am I missing here?
Also, is there no ability to restrict bucket access from a custom domain to only allow CORS requests?
