WHEP: The 'Access-Control-Allow-Origin' header is missing for CORS

[aiquanpeng]

The error message reads as follows:
Access to XMLHttpRequest at 'http://10.244.3.204:1985/rtc/v1/whep/?app=live&stream=livestream' from origin 'http://direct.virtaicloud.com:20410/' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

TRANS_BY_GPT4

[winlinvip]

Please provide a detailed description of the steps to reproduce the issue, otherwise, this issue will be removed.

TRANS_BY_GPT4

[suzp1984]

srs/trunk/src/protocol/srs_protocol_http_stack.cpp

Lines 887 to 912 in 282d94d

	if (enabled) {
	SrsHttpHeader* h = r->header();
	required = !h->get("Origin").empty();
	}
	// When CORS required, set the CORS headers.
	if (required) {
	SrsHttpHeader* h = w->header();
	// SRS does not need cookie or credentials, so we disable CORS credentials, and use * for CORS origin,
	// headers, expose headers and methods.
	h->set("Access-Control-Allow-Origin", "*");
	// See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
	h->set("Access-Control-Allow-Headers", "*");
	// See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
	h->set("Access-Control-Allow-Methods", "*");
	// See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers
	// Only the CORS-safelisted response headers are exposed by default. That is Cache-Control, Content-Language,
	// Content-Length, Content-Type, Expires, Last-Modified, Pragma.
	// See https://developer.mozilla.org/en-US/docs/Glossary/CORS-safelisted_response_header
	h->set("Access-Control-Expose-Headers", "*");
	// https://stackoverflow.com/a/24689738/17679565
	// https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
	h->set("Access-Control-Allow-Credentials", "false");
	// CORS header for private network access, starting in Chrome 104
	h->set("Access-Control-Request-Private-Network", "true");
	}

SRS already supported CORS request, it is maybe your service deployment problem.