Can't get rack-cors to work in production environment using nginx/unicorn.

[cyu]

Can't get rack-cors to work in production environment using nginx/unicorn.

[cyu]

How is the middleware configured?

[calvinl]

In staging.rb:

  config.middleware.insert_before Warden::Manager, Rack::Cors do
    allow do
      origins '*'
      resource '*', :headers => :any, :methods => [:get, :post, :options]
    end
  end

[cyu]

What's the resource you're trying to access? Unfortunately, files in the public folder will be served directly from nginx, bypassing rails altogether. You can try altering your try_files command like this:

# removed $uri
try_files $uri/index.html $uri.html @app;

This will force all non-html resource through the app. Unfortunately, this will put extra load on the unicorn. You should be able to re-configure nginx to send just the resources you want through the app. Unfortunately, I've never done that before so I don't have any examples of how one would do this.

[calvinl]

It's an API controller route. The OPTIONS request gets in, but it returns a 404 because the rails app doesn't know what to do with it.

[jesseadams]

I am having this exact same problem. Same stack (nginx+unicorn). Works great in via thin but not in production. I tried @cyu 's suggestion above and it had no effect.

[toxaq]

+1

[ksiomelo]

+1

[cyu]

I just did a clean Unicorn/Nginx install of the example Rails app (in examples/rails3) and was able to get my tests to pass. One thing to watch out for is to make sure Rack::Cors is inserted before the ActionDispatch::Static:

config.middleware.insert_before "ActionDispatch::Static", "Rack::Cors" do
  ...
end

If you are still having issues, please provide some more information, like:

• Output of rake middleware
• Rack::Cors config'
• The route you're hitting
• The Nginx configuration

[jagthedrummer]

I'm having this same problem. It seems like nginx is not passing through the headers set by Rack::Cors.

Output of rake middleware

use Rack::Sendfile
use Rack::Cors
use ActionDispatch::Static
use Rack::Lock
use #<ActiveSupport::Cache::Strategy::LocalCache::Middleware:0x00000002126568>
use Rack::Runtime
use Rack::MethodOverride
use ActionDispatch::RequestId
use Rails::Rack::Logger
use ActionDispatch::ShowExceptions
use ActionDispatch::DebugExceptions
use ActionDispatch::RemoteIp
use ActionDispatch::Reloader
use ActionDispatch::Callbacks
use ActiveRecord::Migration::CheckPending
use ActiveRecord::ConnectionAdapters::ConnectionManagement
use ActiveRecord::QueryCache
use ActionDispatch::Cookies
use ActionDispatch::Session::CookieStore
use ActionDispatch::Flash
use ActionDispatch::ParamsParser
use Rack::Head
use Rack::ConditionalGet
use Rack::ETag
run RetailerPortal::Application.routes

Rack::Cors config in config/application.rb

    config.middleware.insert_before "ActionDispatch::Static", "Rack::Cors" do
      allow do
        origins(/http:\/\/localhost:(\d*)/,
                /http:\/\/*\.newecx\.com/,
                /http:\/\/*\.ritani\.com/,
                /https:\/\/*\.newecx\.com/,
                /https:\/\/*\.ritani\.com/
               )
        resource '/api/v1/*', :headers => :any, :methods => [:get, :post, :put, :delete, :options]
      end
    end

The route I'm hitting : /api/v1/retailers

The Nginx configuration:

upstream unicorn_retailer_portal {
 server unix:/srv/www/retailer_portal/shared/sockets/unicorn.sock fail_timeout=0;
}

server {
  listen 80;
  server_name retailer_portal oberon;

  access_log /var/log/nginx/retailer_portal.access.log;

  keepalive_timeout 5;

  root /srv/www/retailer_portal/current/public/;


  location / {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_redirect off;

    proxy_read_timeout 60;
    proxy_send_timeout 60;

    # If you don't find the filename in the static files
    # Then request it from the unicorn server
    if (!-f $request_filename) {
      proxy_pass http://unicorn_retailer_portal;
      break;
    }
  }

  location /nginx_status {
    stub_status on;
    access_log off;
    allow 127.0.0.1;
    deny all;
  }

  error_page 500 502 503 504 /500.html;
  location = /500.html {
    root /srv/www/retailer_portal/current/public/;
  }
}

[jagthedrummer]

Well, my problem turned out to be my own fault. I borked the regexes for some of my origins. Instead of /http:\/\/*\.newecx\.com/ I should have had /http:\/\/.*\.newecx\.com/.

[cyu]

Closing this as this is an old issue. I have made at fix wrt OPTIONS requests in the past. Feel free to reopen if this is still happening.