Added extra check for OPTIONS to prevent CORS issues.

maciejkuran · maciejkuran · commit 9e5bbdb529d5 · 2023-07-16T21:05:36.000+02:00
diff --git a/pages/api/email.tsx b/pages/api/email.tsx
@@ -12,6 +12,13 @@ const handler = (req: NextApiRequest, res: NextApiResponse) => {
 
   if (!rateLimitOk) return;
 
+  //Preventing CORS issues.If you try to send a POST etc.. request , the preflight will send it’s ‘first army’ to check the ‘battle field’. But this army is not the request itself, but an OPTION request. That’s why in our API we need to handle OPTION request.
+  if (req.method === 'OPTIONS') {
+    return res.status(200).json({
+      body: 'OK',
+    });
+  }
+
   if (req.method !== 'POST') {
     return res.status(400).json({ error: 'Invalid request method. Accepted: POST' });
   }
diff --git a/pages/api/password.tsx b/pages/api/password.tsx
@@ -12,6 +12,13 @@ const handler = (req: NextApiRequest, res: NextApiResponse) => {
 
   if (!rateLimitOk) return;
 
+  //Preventing CORS issues.If you try to send a POST etc.. request , the preflight will send it’s ‘first army’ to check the ‘battle field’. But this army is not the request itself, but an OPTION request. That’s why in our API we need to handle OPTION request.
+  if (req.method === 'OPTIONS') {
+    return res.status(200).json({
+      body: 'OK',
+    });
+  }
+
   if (req.method !== 'POST') {
     return res.status(400).json({ error: 'Invalid request method. Accepted: POST' });
   }
diff --git a/pages/api/sign-in.tsx b/pages/api/sign-in.tsx
@@ -13,6 +13,13 @@ const handler = (req: NextApiRequest, res: NextApiResponse) => {
 
   if (!rateLimitOk) return;
 
+  //Preventing CORS issues.If you try to send a POST etc.. request , the preflight will send it’s ‘first army’ to check the ‘battle field’. But this army is not the request itself, but an OPTION request. That’s why in our API we need to handle OPTION request.
+  if (req.method === 'OPTIONS') {
+    return res.status(200).json({
+      body: 'OK',
+    });
+  }
+
   if (req.method !== 'POST') {
     return res.status(400).json({ error: 'Invalid request method. Accepted: POST' });
   }
diff --git a/pages/api/sign-up.tsx b/pages/api/sign-up.tsx
@@ -13,6 +13,13 @@ const handler = (req: NextApiRequest, res: NextApiResponse) => {
 
   if (!rateLimitOk) return;
 
+  //Preventing CORS issues.If you try to send a POST etc.. request , the preflight will send it’s ‘first army’ to check the ‘battle field’. But this army is not the request itself, but an OPTION request. That’s why in our API we need to handle OPTION request.
+  if (req.method === 'OPTIONS') {
+    return res.status(200).json({
+      body: 'OK',
+    });
+  }
+
   if (req.method !== 'POST') {
     return res.status(400).json({ error: 'Invalid request method. Accepted: POST' });
   }
