Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TUS misuse of OCIS_CORS_ALLOW_ORIGINS ? #10031

Open
wkloucek opened this issue Sep 12, 2024 · 0 comments
Open

TUS misuse of OCIS_CORS_ALLOW_ORIGINS ? #10031

wkloucek opened this issue Sep 12, 2024 · 0 comments
Labels

Comments

@wkloucek
Copy link
Contributor

Describe the bug

If you don't have the OCIS_URL in OCIS_CORS_ALLOW_ORIGINS, uploads bigger than the TUS chunk threshold (10MB) fail.

They fail because the storage-users service aborts the PATCH request of the first chunk with HTTP 403.

CORS is checked on the browser side and not the server side, so I expect a misusage of the CORS configuration here...

Additional context

See also:

@micbar micbar mentioned this issue Oct 1, 2024
18 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant