Mixing authentication and cors result in 500 response for preflight Method.OPTIONS call

tapir
1

I’m trying to define a “secured” endpoint, with authentication + cors (+ metrics).

While the public endpoints work, the secured ones don’t, giving 500 internal error to the first Method.OPTIONS call.

I can’t find documentation anywhere on such a case.

How would I proceed to implement this ?

Edit : I’m using the http4s backend by the way

2

Can you try with 1.13.2 which should be released in about an hour? It might be a bug I just fixed :slight_smile:

If the problem is still there, could you maybe post a stack trace? Or even better, a reproducible example.

Adam

3

Indeed. Problem solved.

Trying AI agents for troubleshooting for the first time, I completely forgot the basics of testing from what’s working to pin-point the issue to the version update.

Thanks