Hi we have a react ts v0 30 2 frontend and python fastapi v0

Question

Hi we have a react ts v0 30 2 frontend and python fastapi v0 12 1 backend Amid various issues with CORS we are now having the problem that requests to the signin signup are being responded with 200oks from the backend including the st access token but the browser is not being redirected to the index Any ideas why this might happen

rp · Answer

hey < DylanH>

rp · Answer

Can you show me a screenshot of the cookie store post login

DylanH · Answer

sure give me a second

DylanH · Answer

not sure if this is what you mean I m new to frontend stuff

rp · Answer

you need to upgrade the frontend SDK to the latest version

DylanH · Answer

Ah great will do

DylanH · Answer

thanks so much that works

rp · Answer

ok cool

DylanH · Answer

Further to the CORS issues I mentioned yesterday do you have any clue why backend endpoints using Depends verify session might return cors errors The preflight options requests seem to work and correctly return the right accept control origin header as do unprotected endpoints I am hosting the backend on ngrok if that perhaps creates issues When I send requests the backend doesn t even appear to receive the actual request after the preflight request

rp · Answer

so the actual request is sent by the browser or not

DylanH · Answer

It appears to be

rp · Answer

but i guess the response is not read by the browser cause of cors error

rp · Answer

this usually happens if you have added the cors middleware AFTER your api routes

rp · Answer

you want to make sure that the cors middleware runs before any of your APIs

DylanH · Answer

yeah I have done that here but I was trying it before let me move it in front again and retest

DylanH · Answer

after the supertokens middleware though I take it

rp · Answer

no

rp · Answer

before

DylanH · Answer

ah

DylanH · Answer

hmm it still seems to be failing and now I don t see the options requests

DylanH · Answer

app = fastapi FastAPI title= Dummy APP app add middleware CORSMiddleware allow origins= app info website domain allow credentials=True allow methods= GET PUT POST DELETE OPTIONS PATCH allow headers= Content Type + supertokens python get all cors headers allow headers= Content Type x st cookie id refresh token anti csrf front token + supertokens python get all cors headers expose headers= x st cookie id refresh token anti csrf front token app add middleware supertokens fastapi get middleware app include router

rp · Answer

now I don t see the options requests > as in the OPTIONS request fails too

DylanH · Answer

ah never mind it appears the preflight check was just cached or something it is still working

DylanH · Answer

but the actual requests are still failing

rp · Answer

whats the cors error

DylanH · Answer

Access to XMLHttpRequest at https ec4d 213 86 169 34 eu ngrok io auth get user from origin https kaleidoscopic beijinho b469f6 netlify app has been blocked by CORS policy No Access Control Allow Origin header is present on the requested resource

DylanH · Answer

interesting that it has that at the end of the origin

DylanH · Answer

oh that appears to be a copying error

DylanH · Answer

Access to XMLHttpRequest at https ec4d 213 86 169 34 eu ngrok io auth get user from origin https kaleidoscopic beijinho b469f6 netlify app has been blocked by CORS policy No Access Control Allow Origin header is present on the requested resource

rp · Answer

right Im not sure I think the CORS middleware isn t setup properly

DylanH · Answer

hmm its weird Ive tried it with the starlette version and the fastapi version

DylanH · Answer

but I guess the fastapi version is just a wrapper around the other one

rp · Answer

< KShivendu> can help here

KShivendu · Answer

Hey < DylanH> can you turn on your ngrok server again I doubt if ngrok is altering something

DylanH · Answer

I think I figured it out in the end turns out that ngrok was sending a browser warning page i e that you are entering an ngrok server instead of responding appropriately to the request

DylanH · Answer

thanks so much both for the help though