Access-Control-Allow-Origin requesting storage file

Question

I receive error

No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://MY-Firebase-APP.Firebaseapp.com' is therefore not allowed access.

when accessing a json file from my Firebase storage. Here is the rules for the storage-

service firebase.storage {
service firebase.storage {
  match /b/paystumped.appspot.com/o {
    match /{allPaths=**} {
      allow read, write: if true;
    }
  }
}

The app is hosted by Firebase as well. Here is the firebase.json I am using when I run 'firebase deploy'

{
  "hosting": {
    "public": "dist",
    "ignore": [
      "firebase.json",
      "**/.*",
      "**/node_modules/**"
    ],
    "headers": [
      {
        "source": "**/*",
        "headers": [
          {
            "key": "Access-Control-Allow-Origin",
            "value": "*"
          }
        ]
      },
      {
        "source": "**/*.@(jpg|jpeg|gif|png)",
        "headers": [
          {
            "key": "Cache-Control",
            "value": "max-age=7200"
          }
        ]
      },
      {
        "source": "404.html",
        "headers": [
          {
            "key": "Cache-Control",
            "value": "max-age=300"
          }
        ]
      }
    ],
    "cleanUrls": true,
    "trailingSlash": false

} }

I am sure there is some trivial CORS setup to do to make this work.

Possible duplicate of [Firebase Storage and Access-Control-Allow-Origin](http://stackoverflow.com/questions/37760695/firebase-storage-and-access-control-allow-origin) — Mike McDonald, Nov 17 '16 at 15:49

score 6 · Accepted Answer · edited May 23 '17 at 12:30

6

After reading up on CORS and understanding how this should work I found the desired answer here. https://stackoverflow.com/a/37765371/4360863

The firebase storage policy is configured by a utility provided by google.

edited May 23 '17 at 12:30

Community

1
1

answered Nov 17 '16 at 05:33

Philip Brack

1,340
14
26

score 0 · Answer 2 · answered Mar 10 '23 at 06:35

0

If you are facing this issue in flutter web, just run the extra arguments to render the html, that will solve the CROS issue.

flutter run -d chrome --web-renderer html

answered Mar 10 '23 at 06:35

Dr.House

784
5
11

Access-Control-Allow-Origin requesting storage file

2 Answers2