OPTIONS for /.well-known/webcrypto-socket missing required CORS header

[WorldThirteen]

Request: OPTIONS https://127.0.0.1:31337/.well-known/webcrypto-socket doesn't contain 'Access-Control-Allow-Origin': '*' header, while GET for https://127.0.0.1:31337/.well-known/webcrypto-socket does.

This leads to a case when the web app couldn't connect to Fortify.

Since there is a case when a browser will send an OPTIONS preflight request even for GET request, it is required to have such a response header for OPTIONS request too.

[microshine]

What browser does throw that exception (and version)?

[donskov]

Chrome 84

[donskov]

@microshine You can call fetch for catch the error:

fetch('https://127.0.0.1:31337/.well-known/webcrypto-socket', { method: 'OPTIONS' })

[microshine]

https://github.com/PeculiarVentures/fortify/releases/tag/v1.3.6

[WorldThirteen]

Fixed in 1.3.6.