SDK requests from browser to envd blocked via CORS

[ValentaTomas]

Envd seems to be blocking requests from browser because of CORS. The first OPTIONS request is successful but the next (start process) request fails on cors with no response headers.

We are setting CORS in envd server, but it looks like there still might be a problem.

[ValentaTomas]

This might be a problem with the SDK and not the envd server because a direct fetch call to the envd server seems to work.

[ValentaTomas]

This is a problem with either a wrong configuration of API client, envd client, and ConnectRpc transport (cors vs no-cors in the SDK) or with Nginx proxies that might be removing some headers (e2b-dev/infra#94).

[ben-fornefeld]

sharing for visibility - while working with envd i discovered this, where it seems that the envd access token header X-Access-Token is not explicitly allowed? (i don't have a ton of context so it could be somehow implicit / is maybe not necessary here)

[mishushakov]

@ValentaTomas @ben-fornefeld I think this is no longer the case? Feel free to close the issue.