CORS Issue for Unleash admin API from vue webapp

[pp24-25]

Describe the bug

I am trying to unleash api in vue app directly to manipulate the underline unleash instance and I am facing cors error. Took this example from unleash documentation .

let config = {
    method: 'get',
    maxBodyLength: Infinity,
    url: 'http://unleash.example.com/api/admin/search/features',
    headers: { 
      'Accept': 'application/json', 
      'Authorization': 'user:token',
      'Content-Type': 'application/json'
    }
  };
    const response = await axios(config)
    .then((response)=> {
      console.log(response)
      return response.data
    })
    .catch((error) => {
      return { data: error.response.data }
    })

Error : - Access to XMLHttpRequest at 'http://unleash.example.com/api/admin/search/features' from origin 'http://localhost:8080' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: Redirect is not allowed for a preflight request.

Steps to reproduce the bug

No response

Expected behavior

We tested via curl in postman we were able to get response so expected this javascript code also to work.

Logs, error output, etc.

No response

Screenshots

No response

Additional context

No response

Unleash version

5.9.6

Subscription type

Open source

Hosting type

Self-hosted

SDK information (language and version)

no SDK being used

[sighphyre]

So we don't support this at the moment, the easiest way to solve this for your needs is to spin up a proxy to handle CORS, something like Vercel might help out here.

Unleash is OSS so we'd be open to looking at a PR or providing guidance if you'd want to take a stab at fixing this!