Hi @_Mayank
I am unable to fully replicate your issue.
Can you confirm that you have Site settings as follows:
1. Access-Control-Allow-Credentials:
• Name: HTTP/Access-Control-Allow-Credentials
• Value: true (only if credentials are needed)
2. Access-Control-Allow-Headers:
• Name: HTTP/Access-Control-Allow-Headers
• Value: Content-Type, Authorization (or other headers as per your requirement)
3. Access-Control-Allow-Methods:
• Name: HTTP/Access-Control-Allow-Methods
• Value: GET, POST, OPTIONS
4. Access-Control-Allow-Origin:
• Name: HTTP/Access-Control-Allow-Origin
• Value: https://your-allowed-domain.com or * (to allow all origins)
5. Access-Control-Expose-Headers:
• Name: HTTP/Access-Control-Expose-Headers
• Value: Header1, Header2 (replace with your actual header names)
6. Access-Control-Max-Age:
• Name: HTTP/Access-Control-Max-Age
• Value: 86400 (or the desired cache duration in seconds)
These entries should be created or modified within the ‘Site Settings’ section of the Portal Management app. Each entry corresponds to a specific CORS header that is being set or modified.
NOTE that these Names in the site settings must match exactly.