Challenges with Azure API Management and CORS Configuration for a Distributed Team
I'm writing unit tests and I've searched everywhere and can't find a clear answer. Integrating multiple microservices using Azure API Management has been quite the journey for my remote team. We're trying to enable CORS to allow our frontend applications to communicate with the APIs hosted on different origins. Despite following the official Azure documentation, we still face issues with the pre-flight requests not returning the expected headers. Here’s what I have in place so far. The API Management instance is set up to accept requests from our frontend domains. I’ve added the following CORS policy in the inbound section: ```xml <policies> <inbound> <base /> <cors> <allow-origins> <origin>https://frontend.example.com</origin> <origin>https://another-frontend.example.com</origin> </allow-origins> <allow-methods> <method>GET</method> <method>POST</method> <method>OPTIONS</method> </allow-methods> <allow-headers> <header>*</header> </allow-headers> <expose-headers> <header>Custom-Header</header> </expose-headers> </cors> </inbound> </policies> ``` However, when making requests, the browser still blocks them due to CORS policy violations. I've verified the API Management is correctly forwarding the `OPTIONS` requests, which return a 200 status, but lack the `Access-Control-Allow-Origin` header. To troubleshoot, I inspected the network traffic and noticed that the CORS pre-flight requests get a response without our custom headers configured. I even tried setting the CORS policy globally versus at the API level, but that didn't yield any improvements either. As a next step, I'm considering using Azure Functions as a proxy to handle CORS, but I wonder if there’s a better native solution. Any insights or approaches others have taken to resolve such CORS issues with Azure API Management could really help steer us in the right direction! This is part of a larger service I'm building. What am I doing wrong? I'm coming from a different tech stack and learning Xml. Thanks for any help you can provide! I'm coming from a different tech stack and learning Xml. This is for a service running on Ubuntu 20.04. Thanks in advance!