Access-Control-Allow-Origin issue

[alan-bradbury-hollaroo]

Access-Control-Allow-Origin issue

[Kylir]

Hello!
I had the exact same issue: An ExpressJS API, cors configured and the OPTIONS request was successful, but the POST just after was failing.
It took me a while to realise that I had another call to cors deeper in my code for that POST that was overwriting the headers.
It's worth searching for cors in your project if you have this issue.

[dougwilson]

Hello, and sorry you are having trouble. I'm not sure how that could be happening, as you can view our source code and see that the only place this module returns that header as '*' is when the origin options is blank or set to '*' (https://github.com/expressjs/cors/blob/master/lib/index.js#L44). In order to assist further, we'll need your complete app such that we can run it and reproduce the issue, as there must be something else causing that header to be returned as '*' that is not clear from what has been provided in the report. Alternatively you are always welcome to open a PR that makes the changes necessary to resolve your issue.