Report this

What is the reason for this report?

Anyone solved the Spaces Javascript CORS Access-Control-Allow-Origin blocker from Presigned urls?

Posted on November 4, 2023
ryan

By ryan

I’ve searched all over and I see so many others stating the same problem. I generate a presigned url, and then try to use vanilla Javascript to PUT the file into Spaces. It always gives:

Access to XMLHttpRequest at ‘PRESIGNED_URL’ from origin ‘MY_WEBSITE_DOMAIN_NAME’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

I originally tried following this example since my site is Django based. Django generates the presigned url which is then used by the Javascript. The example is from 2021, so it’s possible something has changed on the DO side.

https://justdjango.com/blog/how-to-upload-large-files

Inside the Spaces Admin, I created a CORS record. I’ve tried setting it to allow everything using * and checking all the method boxes. I’ve tried creating new API keys several times. None of this has worked.

The Preflight response is good and shows all the proper information including my site as the Access-Control-Allow-Origin. The actual PUT fails though.

I’ve tried changing out the Javascript to JQuery even. Same result. I need this to submit on the Client side as to not use the server processor for larger files.

So frustrating. Doing a search finds so many other similar stories.

Anyone else solved this?

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Start building today

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.