CORS Errors

[jaketoolson]

Similar to issue #2 , I'm getting CORS errors. When I switch to aws-sdk to upload directly to S3, no CORS error.

I'm not sure what the difference is in terms of the headers etc;

My CORS Config:

    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "POST",
            "GET",
            "PUT",
            "DELETE",
            "HEAD"
        ],
        "AllowedOrigins": [
            "*"
        ],
        "ExposeHeaders": []
    }
]

[NimperX]

Hi @jaketoolson,

Is this issue fixed?

[siamahnaf]

I am getting cors error! @NimperX

[zahitrios]

For those ones who are getting CORS error, that error is related with policity and bucket config, here you have the steps to help me to fix it:

1. Verify your policy which is attached to your user, it should look like this:

    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*",
                "s3-object-lambda:*"
            ],
            "Resource": [
                "arn:aws:s3:::BUCKETNAME",
                "arn:aws:s3::: BUCKETNAME/*"
            ]
        }
    ]
}

2. Follow this post to enable ACL in your bucket:

• https://www.learnaws.org/2023/08/26/aws-s3-bucket-does-not-allow-acls/

3. Your bucket policy should look like this:

    "Version": "2012-10-17",
    "Id": "http referer policy example",
    "Statement": [
        {
            "Sid": "Allow all kind of http requests originating from allow origins",
            "Effect": "Allow",
            "Principal": "*",
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl",
                "s3:GetObject",
                "s3:GetObjectAcl",
                "s3:DeleteObject"
            ],
            "Resource": "arn:aws:s3:::sushilunch/*",
            "Condition": {
                "StringLike": {
                    "aws:Referer": [
                        "http://localhost:3000",
                        "http://localhost"
                    ]
                }
            }
        }
    ]
}

5. At least, add your origins to the bucket cors (add the origins needed)

    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "PUT",
            "POST",
            "DELETE",
            "GET"
        ],
        "AllowedOrigins": [
            "http://localhost:3000",
            "http://localhost"
        ],
        "ExposeHeaders": []
    }
]