Cannot Login via Extension due to CORS policy

I've got my Hoarder instance running flawlessly via HTTP. But when I try to access it through my reverse-proxy (https with valid cert) it gives me

Failed to Fetch

Failed to Fetch

. The extension inspect window shows this error:

Access to fetch at 'https://publicdomain/api/trpc/apiKeys.validate?batch=1' from origin 'chrome-extension://kgcjekpmcjjogibpjebkhaanilehneje' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Access to fetch at 'https://publicdomain/api/trpc/apiKeys.validate?batch=1' from origin 'chrome-extension://kgcjekpmcjjogibpjebkhaanilehneje' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

I'm using CloudFlare to do the reverse proxy with no access control (for debugging) on the host.

Truenas alphabatizes the docker-compose:

services:
  chrome:
    command:
      - '--no-sandbox'
      - '--disable-gpu'
      - '--disable-dev-shm-usage'
      - '--remote-debugging-address=0.0.0.0'
      - '--remote-debugging-port=9222'
      - '--hide-scrollbars'
    image: gcr.io/zenika-hub/alpine-chrome:123
    restart: unless-stopped
  meilisearch:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_NO_ANALYTICS=true
      - MEILI_MASTER_KEY='strong'
    image: getmeili/meilisearch:v1.11.1
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/meilisearch:/meili_data
  web:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_ADDR=http://meilisearch:7700
      - BROWSER_WEB_URL=http://chrome:9222
      - HOARDER_VERSION=release
      - NEXTAUTH_URL=https://publicURL
      - NEXTAUTH_SECRET='strong'
      - DATA_DIR=/data
      - DISABLE_SIGNUPS=true
      - OAUTH_WELLKNOWN_URL=https://publicURL/
    image: ghcr.io/hoarder-app/hoarder:release
    ports:
      - '30087:3000'
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/data:/data
version: '3.8'

services:
  chrome:
    command:
      - '--no-sandbox'
      - '--disable-gpu'
      - '--disable-dev-shm-usage'
      - '--remote-debugging-address=0.0.0.0'
      - '--remote-debugging-port=9222'
      - '--hide-scrollbars'
    image: gcr.io/zenika-hub/alpine-chrome:123
    restart: unless-stopped
  meilisearch:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_NO_ANALYTICS=true
      - MEILI_MASTER_KEY='strong'
    image: getmeili/meilisearch:v1.11.1
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/meilisearch:/meili_data
  web:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_ADDR=http://meilisearch:7700
      - BROWSER_WEB_URL=http://chrome:9222
      - HOARDER_VERSION=release
      - NEXTAUTH_URL=https://publicURL
      - NEXTAUTH_SECRET='strong'
      - DATA_DIR=/data
      - DISABLE_SIGNUPS=true
      - OAUTH_WELLKNOWN_URL=https://publicURL/
    image: ghcr.io/hoarder-app/hoarder:release
    ports:
      - '30087:3000'
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/data:/data
version: '3.8'

Cannot Login via Extension due to CORS policy

I've got my Hoarder instance running flawlessly via HTTP. But when I try to access it through my reverse-proxy (https with valid cert) it gives me

Failed to Fetch

Failed to Fetch

. The extension inspect window shows this error:

Access to fetch at 'https://publicdomain/api/trpc/apiKeys.validate?batch=1' from origin 'chrome-extension://kgcjekpmcjjogibpjebkhaanilehneje' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Access to fetch at 'https://publicdomain/api/trpc/apiKeys.validate?batch=1' from origin 'chrome-extension://kgcjekpmcjjogibpjebkhaanilehneje' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

I'm using CloudFlare to do the reverse proxy with no access control (for debugging) on the host.

Truenas alphabatizes the docker-compose:

services:
  chrome:
    command:
      - '--no-sandbox'
      - '--disable-gpu'
      - '--disable-dev-shm-usage'
      - '--remote-debugging-address=0.0.0.0'
      - '--remote-debugging-port=9222'
      - '--hide-scrollbars'
    image: gcr.io/zenika-hub/alpine-chrome:123
    restart: unless-stopped
  meilisearch:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_NO_ANALYTICS=true
      - MEILI_MASTER_KEY='strong'
    image: getmeili/meilisearch:v1.11.1
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/meilisearch:/meili_data
  web:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_ADDR=http://meilisearch:7700
      - BROWSER_WEB_URL=http://chrome:9222
      - HOARDER_VERSION=release
      - NEXTAUTH_URL=https://publicURL
      - NEXTAUTH_SECRET='strong'
      - DATA_DIR=/data
      - DISABLE_SIGNUPS=true
      - OAUTH_WELLKNOWN_URL=https://publicURL/
    image: ghcr.io/hoarder-app/hoarder:release
    ports:
      - '30087:3000'
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/data:/data
version: '3.8'

services:
  chrome:
    command:
      - '--no-sandbox'
      - '--disable-gpu'
      - '--disable-dev-shm-usage'
      - '--remote-debugging-address=0.0.0.0'
      - '--remote-debugging-port=9222'
      - '--hide-scrollbars'
    image: gcr.io/zenika-hub/alpine-chrome:123
    restart: unless-stopped
  meilisearch:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_NO_ANALYTICS=true
      - MEILI_MASTER_KEY='strong'
    image: getmeili/meilisearch:v1.11.1
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/meilisearch:/meili_data
  web:
    environment:
      - PGID=568
      - PUID=568
      - TZ=America/Los_Angeles
      - MEILI_ADDR=http://meilisearch:7700
      - BROWSER_WEB_URL=http://chrome:9222
      - HOARDER_VERSION=release
      - NEXTAUTH_URL=https://publicURL
      - NEXTAUTH_SECRET='strong'
      - DATA_DIR=/data
      - DISABLE_SIGNUPS=true
      - OAUTH_WELLKNOWN_URL=https://publicURL/
    image: ghcr.io/hoarder-app/hoarder:release
    ports:
      - '30087:3000'
    restart: unless-stopped
    volumes:
      - /mnt/pool1/appdata/hoarder/data:/data
version: '3.8'

Cannot Login via Extension due to CORS policy

Similar Threads

Cannot Login via Extension due to CORS policy

Similar Threads

Similar Threads

Similar Threads