Failed to load strapi blog post on production admin dashboard

[ghufr]

Informations

• Node.js version: 10.8.0
• npm version: 6.4.0
• Strapi version: 3.0.0-alpha.13.1
• Database: Mongo
• Operating system: Ubuntu 18.04.1

What is the current behavior?
Blog post won't load

Steps to reproduce the problem
Deploy strapi and use domain

What is the expected behavior?
Blog post loaded

Suggested solutions

• Delete Blog post on admin dashboard
• Enable CORS

[lauriejim]

Hello @ghufr ! Thank you for this report, will try to fix it.

[amartincolby]

What's the status of this? It's still listed as an open issue and I'm encountering the problem in Beta.

[cadavre]

Same problem here, still in 2020. It's kind of a ridiculous because I cannot create any more admin accounts now. :)

To point this:

This is due to CORS set on strapi.io domain!

[derrickmehaffy]

@cadavre you are testing with the latest beta right? (beta.18.4)?

[cadavre]

Yes, beta.18.4. In fact I cannot reach any CMS menu now...

Any workaround?

How frustrating is that whole CMS fails because of feature called "get news from blog". Argh.

[derrickmehaffy]

Can you dump a screenshot of your network tab errors?

[cadavre]

Access to fetch at 'https://blog.strapi.io/ghost/api/v0.1/posts/?client_id=ghost-frontend&client_secret=1f260788b4ec&limit=2' from origin 'xxxx' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

[derrickmehaffy]

That CORS error shouldn't prevent the admin from loading 🤔

[cadavre]

I'll try to investigate. BTW Can't simply remove this feature? Not really sure its that useful.

[derrickmehaffy]

It's embedded into the strapi-admin package I believe, you can customize that package via the over-ride system. https://strapi.io/documentation/3.0.0-beta.x/admin-panel/customization.html (there won't be a direct guide to remove that but the general flow of how you tweak that package is there)

[asherccohen]

Hi, is this still a thing?

Does this mean the user cookies are not stored correctly therefore I'm logging in but can't fetch posts?