API doesn't include CORS headers in response to GET method request

[MattKobayashi]

Describe the Bug

The Tautulli API doesn't include CORS headers (Access-Control-Allow-Origin, etc.) when responding to a GET method request received via Cloudflare tunnel using Service Tokens. OPTIONS method requests are not affected.

Steps to Reproduce

1. Configure Tautulli and Cloudflare tunnel for reverse proxy.
2. Configure Cloudflare Access application with appropriate policies and CORS settings.
3. Make an API call using service tokens for authentication.

Expected Behavior

Tautulli should include CORS headers in response to all method requests, including GET.

Screenshots

Relevant Settings

• Cloudflare Access CORS settings:
  

Tautulli Version

v2.13.4

Git Branch

master

Git Commit Hash

v2.13.4

Platform and Version

[Docker] Linux 6.6.21-0-lts (#1-Alpine SMP PREEMPT_DYNAMIC Thu, 07 Mar 2024 10:55:08 +0000 - Alpine Linux 3.19.1)

Python Version

3.11.8 (main, Feb 19 2024, 17:01:17) [GCC 13.2.1 20231014]

Browser and Version

Chrome 122.0.6261.129 (Official Build) (arm64)

Link to Logs

https://gist.github.com/MattKobayashi/00e0477fa853047535c6b2fd4ee0cb5f