storybookjs/storybook

Refs to other localhosts do not work

Open

#18,405 创建于 2022年6月4日

在 GitHub 查看
 (12 评论) (9 反应) (0 负责人)TypeScript (89,909 star) (10,058 fork)batch import
bugcompositionhas workaroundhelp wantedsev:S3

描述

Bug:

Access to fetch at 'http://localhost:3000/stories.json' from origin 'http://localhost:3020' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.

You can not use the wildcard * when the credentials mode is true. At the moment it is not set so I think chrome is placing:

Access-Control-Allow-Credentials: true

by default. I think when this is set to:

Access-Control-Allow-Credentials: false

it should work.

贡献者指南

技术栈
typescriptnodejs
领域
backendsecurity
议题类型
bug
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
2
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
under 1 hour
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
clear
前置要求
CORS knowledgeStorybook configuration
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
80
研究方向
Look into the Storybook dev server's CORS settings, likely in the `@storybook/core server` package. Check the server's response headers and the `access control allow credentials` setting. Consider modifying the default behavior to not send credentials mode when using wildcard origin, or to set `Access Control Allow Credentials: false` by default. Review the issue comments for any additional context from maintainers.
Refs to other localhosts do not work · storybookjs/storybook#18405 | Good First Issue