Hi there!
I have a customer account ui extension that get some data using app proxy
I’ve managed the CORS by setting these headers:
response.headers["Access-Control-Allow-Origin"] = "*"
response.headers["Access-Control-Allow-Methods"] = "GET, PATCH, PUT, OPTIONS"
response.headers["Access-Control-Allow-Headers"] = "Content-Type, Authorization"
response.headers["Access-Control-Max-Age"] = "86400"
It works correctly in dev and in production but today one merchant told me that the extension doesn’t work anymore
The error on the console is:
Access to fetch at 'https://<store>.myshopify.com/apps/<my_app>/app_proxy/customers/7854090977454' from origin 'https://extensions.shopifycdn.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: Redirect is not allowed for a preflight request.
The only difference between this store and the other stores where I’ve tested is that it is using a custom customer account URL (not the default https://shopify.com/<id>/account
Can the problem be that Shopify makes a redirect from the custom url to the default url before calling the app proxy?