I'm facing a blocking issue and I'm hoping someone from the community or team can help.
The Problem:
My web application, hosted at the preview URL https://*.dev21.app-preview.com, is getting TypeError: Failed to fetch on all API calls to my Supabase project (/rest/v1/...).
Diagnosis:
After extensive debugging, we are 99.9% certain this is a CORS issue, as my development URL is not on the list of allowed origins.
The Mystery:
The problem is that the "CORS settings" / "Additional Allowed Origins" UI is completely missing from my project dashboard, so I have no way to add my URL.
What I've already checked:
• I am the Owner of the project. • It's a hosted supabase.co project (ref: ivbpjrfvmjaoucazoceu). • I have confirmed the CORS setting is NOT in any of the following locations in my dashboard: • Project Settings -> Data API • Project Settings -> Infrastructure • Authentication -> URL Configuration • Authentication -> Advanced • I've opened a support ticket (SU-260591), but as a Free plan user, I was advised to ask the community here.
My Question:
1. Has anyone else experienced the CORS settings UI disappearing from their dashboard? 2. Is there a new, hidden location for this setting that I'm not aware of? 3. Is there a way to add an allowed origin programmatically (e.g., via the Supabase CLI) without using the missing UI?
Supabase gives you the tools, documentation, and community that makes managing databases, authentication, and backend infrastructure a lot less overwhelming.