Nginx: Access-Control-Allow-Origin not working for specific locations

Question

I added the Access-Control-Allow-Origin under the server section. That works as expected for any 'images'. When I call the 'canonical link' (1.pdf) the Access-Control-Allow-Origin is missing in the response. Why? And how can that be solved?

I don't want do add this line to all of my canonical links.

server {
    server_name myserver.de;
    listen 10.11.12.13:443 ssl http2;
    access_log /var/log/nginx/ssl_access.log;
    error_log /var/log/nginx/ssl_error.log error;

    add_header 'Access-Control-Allow-Origin' 'https://foo.bar';

    location / {
        root /data/images/;

        location ~ (.*)/1.pdf$ {
            #add_header 'Access-Control-Allow-Origin' 'https://foo.bar';
            add_header Link "<http://foo.bar/a-pdf>; rel=\"canonical\"";
        }
    }

Cloud Ace Wenyuan Jiang · Accepted Answer · 2019-05-21 14:29:38Z

5

There could be several add_header directives. These directives are inherited from the previous level if and only if there are no add_header directives defined on the current level.

You can use ngx_headers_more module to solve this problem

If you don't want to use above module, try something like this

server {
    set $headerA 'https://foo.bar';
    set $headerB "";

    if (something) {
            set $headerB "something";
    }

    add_header 'Access-Control-Allow-Origin' $headerA;
    add_header Link $headerB;
}

Only use add_header in the server block and remove all add_header from location block. Note that Link would not be returned if headerB is empty

edited May 21, 2019 at 14:29

answered May 13, 2019 at 6:49

Cloud Ace Wenyuan Jiang

2,2059 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

saromba Over a year ago

So If I don't install this ngx_headers_more extension, I 've to add the 'add_header' to every other location? I've ~ 50 canonical links...

Collectives™ on Stack Overflow

Nginx: Access-Control-Allow-Origin not working for specific locations

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related