RCE CORS issue

[otnw1]

Hello, 

I am running a CanvalLMS instance in AWS provided by Bitnami.

I seem to be having an issue that is effecting file uploads and course imports and other things. 

RCE in enabled and running, i can go to https://rce.mydomian.net and i get the hello from rce message. 

when i try to upload an image for example to a course page i get this 

Access to fetch at 'https://rce.mydomain.net/api/session' from origin 'https://canvas.mydomian.net' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

no matter where i try adding the 'Access-Control-Allow-Orgin' (.htaccess, or the apache config) it does not work.

where do i need to add what to make it work?

[otnw1]

any one?

the best i can tell is it has something to do with the prefilght settings but nothing i do seems to work.

[PsychCore]

Same issue on our end. We added the 'Access-Control-Allow-Orgin "*" and have tweaked every other header setting you can imagine. Checked the CORS.js package and saw it was missing dependencies so I updated and cleared those issues - only to have the same Preflight failure with CORS.

[RaulAlvarez]

After reading carefully, it seems like they only mention either modifying the server's backend to add the headers (in cae we have acces to the server) or a proxy (which only works for testing). Currently I'm reading about interceptors but I'm still not sure that it will work either. Probably the only option would be a client-side server.

But again, I'm also searching and hoping someone with more experience might enlighten us.