Cors error r2
why am I getting this again and again. Curl seems to be working fine -
curl 'https://test-bucket.14a1ed97e3dde8ef3b6e6391d4114bce.r2.cloudflarestorage.com/user-2/mushroom_biryani.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=a1ec215a5d56c9d44054874dc2c73e3d%2F20241119%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20241119T192449Z&X-Amz-Expires=6000&X-Amz-Signature=26022bca58f3f7e04a223f19c64cc4946e50a713d0e23ff9f136b604621dc749&X-Amz-SignedHeaders=host&x-id=GetObject' \
-H 'sec-ch-ua-platform: "macOS"' \
-H 'Referer: https://test.fileloom.com:3000/' \
-H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36' \
-H 'Accept: application/json, text/plain, /' \
-H 'sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"' \
-H 'Content-Type: application/octet-stream' \
-H 'sec-ch-ua-mobile: ?0'
my bucket cors policy -
[
{
"AllowedOrigins": [
"https://test.fileloom.com:3000/",
"https://www.fileloom.com/",
"https://fileloom.com/",
"https://www.alpha.fileloom.com/",
"https://alpha.fileloom.com/"
],
"AllowedMethods": [
"GET"
]
}
]
my request page - https://test.fileloom.com:3000/4Fyd
FileLoom
FileLoom - India's Fast file upload and download website
FileLoom
FileLoom - India's Fast file upload and download website
1 Reply
[
{
"AllowedOrigins": [
"https://test.fileloom.com:3000",
"https://www.fileloom.com",
"https://fileloom.com",
"https://www.alpha.fileloom.com",
"https://alpha.fileloom.com"
],
"AllowedMethods": [
"GET"
],
"AllowedHeaders": [
"Content-Type",
"Authorization"
],
"ExposeHeaders": [
"ETag"
],
"MaxAgeSeconds": 3600
}
]
this policy worked
ExposeHeaders is missing headers like ETag
AllowedHeaders is missing headers like Authorization or Content-Type
AllowedMethods is missing methods like POST/PUT (you do not need to include OPTIONS)
this worked, why do we even need to include these ?, expalin and I can download the files just by visiting urls, not sure if the AllowedOrigins headers is working fine,
[
{
"AllowedOrigins": [
"https://test.fileloom.com:3000",
"https://www.fileloom.com",
"https://fileloom.com",
"https://www.alpha.fileloom.com",
"https://alpha.fileloom.com"
],
"AllowedMethods": [
"GET"
],
"AllowedHeaders": [
"Content-Type",
"Authorization"
],
"ExposeHeaders": [
"ETag"
],
"MaxAgeSeconds": 3600
}
]