I am using https://github.com/nikcio/Nikcio.UHeadless Graphql package. I want to restrict url using CORS Policy but still allowing any url Code file attached @Nikcio https://cdn.discordapp.com/attachments/1263083137563496480/1263083138423193632/message.txt?ex=6698f157&is=66979fd7&hm=84e3c54e1782653c89ce16a681a16870877deff3289e1507ea0ff66b4316f842&

as it depends when you add cors, think this might help https://docs.umbraco.com/umbraco-cms/reference/routing/custom-middleware#configuring-the-cross-origin-resource-sharing-cors-middleware

@Nilay I'm on my phone right now but it looks like that you didn't specify the same name in the UHeadless cors settings as where you registered it?

i tried with same name MyAllowSpecificOrigins and also different name but for any case it was allowing all domains @User

Are you sending the

Origin

header on your request? Otherwise Asp Net Core dont apply any cors policies. As far as I can tell I only register the cors the default way for the GrapgQL endpoint: https://github.com/nikcio/Nikcio.UHeadless/blob/v4%2Fcontrib/src%2FNikcio.UHeadless%2FExtensions%2FUHeadlessExtensions.cs#L135

Thanks. I will check it out