Setting up CORS headers for mock server

[tudorgeorgescu]

App Details:

Postman for Mac
Version 6.0.10
OS X 14.5.0 / x64

I am trying to setup a mock server to be able to test my Single page app also without the API server running, but the browser fails to pass the CORS checks, although I created a mock for the OPTIONS call and included all Access-Control-Allow-* headers in the Example for the mock.
When checking the actual response the browser gets, I can see that the Headers were not sent as I set them (ex. Access-Control-Allow-Origin still responds with *, instead of the origin I set in postman, and which is actually returned if I call the mocked API via Postman)

[hamecodedVia]

having the same problem.

[ratpik]

@tudorgeorgescu @hamecodedVia - CORS support is enabled by default for all mock servers. You do need to add a OPTIONS request in your collection to enable CORS. The mock server automatically adds the Access-Control-Allow-Origin: * to the preflight request.

If you do specify a header for the Access-Control-Allow-Origin: yourdomain.com in your saved example, then the cross-origin call that you make should have an origin set in the request that matches yourdomain.com.

[tudorgeorgescu]

@atpik that's the problem it "should" set the domain to the one you write in the example (like yourdomain.com), but it actually always sends (*), so the browser will reject it

…

On Wed, Jun 13, 2018 at 4:48 PM Pratik ***@***.***> wrote: @tudorgeorgescu <https://github.com/tudorgeorgescu> @hamecodedVia <https://github.com/hamecodedVia> - CORS support is enabled by default for all mock servers. You do need to add a OPTIONS request in your collection to enable CORS. The mock server automatically adds the Access-Control-Allow-Origin: * to the preflight request. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4603 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AXDL41b7DrqLYYr-k8MLJz3FqtVMWlsUks5t8SYsgaJpZM4UOgF4> .

[preethammavin]

@tudorgeorgescu Thats odd, can you give us a screenshot of the error so that we can look into it?

[tudorgeorgescu]

Here it is.
I set the Access-Control-Allow-Origin but the mock still responds with *

[tudorgeorgescu]

@hamecodedVia did you manage to solve it? I still couldn't set it up ...

[hamecodedVia]

no

…

On Wed, Aug 29, 2018 at 11:08 PM tudorgeorgescu ***@***.***> wrote: @hamecodedVia <https://github.com/hamecodedVia> did you manage to solve it, I still couldn't set it up — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4603 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AiX8nJ5n_4r_s2AWIQ5Z2uaN27lD5J3iks5uVvS4gaJpZM4UOgF4> .