Add CORS headers to CDN serving up SDK and widgets

[danielroe]

Is your enhancement request related to a problem? Please describe.

Partytown is a mechanism for loading 3rd-party scripts in non-blocking way in a web worker. It has the capacity to dramatically improve user experience.

Describe the solution you'd like

The key thing that is required for chatwoot to work out-of-the-box with partytown is for all assets needed by the SDK (including the SDK itself) to be served up with CORS headers (ideally allowing all hosts) so that the assets can be fetched by a script rather than from the browser itself.

Describe alternatives you've considered

The only alternative to use Partytown with chatwoot would be to set up a proxy in between, but this seems to have a few issues that I can go into if adding CORS headers is not feasible.

[pranavrajs]

@fayazara Please take help from @sojan-official for testing the changes. I believe we can remove the CORS * policy added to pack/js. We might need some changes or fixes in the CloudFront config. Please see the reference PR here. https://github.com/chatwoot/chatwoot/pull/1182/files

[danielroe]

I might be misunderstanding, but I think this might be less removing the CORS * policy for fonts, but rather extending it to all resources and assets.

[sojan-official]

When we serve the widget directly from the Chatwoot Application, we add the Access-Control-Allow-Origin headers.

But in our cloud version, where the assets are delivered through CloudFront, we are missing these.

---

let have the settings updates in cloudfront

cc: @pranavrajs @fayazara @vishnu-narayanan

[productdevbook]

https://opensource.huntersofbook.com/guide/nuxt-packages/chatwoot

iam support partytown settings, but dont working. I hope you fix this soon.

[AwakenTheJaken]

Is your enhancement request related to a problem? Please describe.

Partytown is a mechanism for loading 3rd-party scripts in non-blocking way in a web worker. It has the capacity to dramatically improve user experience.

Describe the solution you'd like

The key thing that is required for chatwoot to work out-of-the-box with partytown is for all assets needed by the SDK (including the SDK itself) to be served up with CORS headers (ideally allowing all hosts) so that the assets can be fetched by a script rather than from the browser itself.

Describe alternatives you've considered

The only alternative to use Partytown with chatwoot would be to set up a proxy in between, but this seems to have a few issues that I can go into if adding CORS headers is not feasible.

We too are having the same issue and setting the cdn host doesn't resolve my {"error":"web widget does not exist"} anyone have any more suggestions other than hosting this by downloading the JS every deploy? Thank you!