CORS @CrossOrigin annotation not working when metrics.rest-request.enabled=true is set

[tjquinno]

Environment Details

• Helidon Version: 2.x, 3.x, 4.x
• Helidon SE or Helidon MP MP
• JDK version:
• OS:
• Docker version (if applicable):

---

Problem Description

Enabling the optional MicroProfile REST request metrics feature causes Helidon to ignore @CrossOrigin annotations in the code.

Steps to reproduce

In the Helidon MP CORS example app, add this line to microprofile-config.properties:

metrics.rest-request.enabled=true

Now try to run the curl commands in the app's README.md which trigger CORS behavior, and you'll get 500 status messages instead of success and the log will report that Helidon could not locate the expected CORS information.

Workaround

Add CORS configuration settings to microprofile-config.properties to achieve the result you wanted to achieve using the annotations. See https://helidon.io/docs/latest/index.html#/mp/cors/cors#_configuration