NGINX + CORS addition

[dimyy]

If you planing use direct ESPO calls from other web pages you can add this to avoid CORS block:

location / {
if ($request_method = 'OPTIONS') {
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
#
# Custom headers and headers various browsers *should* be OK with but aren't
#
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
#
# Tell client that this pre-flight info is valid for 20 days
#
add_header 'Access-Control-Max-Age' 1728000;
add_header 'Content-Type' 'text/plain; charset=utf-8';
add_header 'Content-Length' 0;
return 204;
}
try_files $uri $uri/ /index.php?$query_string;
}

By default ESPO reject OPTIONS requests.

[esforim]

Thank you dimyy, where do I add these? It doesn't look like it belong to the htaccess file.

I'm currently playing with an low-code app builder call Appgyver and when I was testing API ping I'm getting a CORS error (I think), work fine for other JSON/database without authentication.

[yuri]

It's NGINX config. htaccess is apache-only thing.

[esforim]

Thanks yuri, guess I try to look for solution for Apache.

[esforim]

Hi guys, manage to find fix this problem for Apache with solution here: https://forum.espocrm.com/forum/gene...3921#post73921

[yuri]

https://github.com/espocrm/espocrm/issues/2755