Help! Cross-origin. Can't get this working for the life of me!

If you are running “bolt.diy” in a dev environment the application Ex: docker compose up --build app-dev

You would have to modify the Dockerfile file, go to the end of the file and modify the server startup command to include the correct headers for COOP: original command: #CMD [“pnpm”, “run”, “dev”, “–host”, “0.0.0.0”]

update to this: CMD [“pnpm”, “run”, “dev”, “–host”, “0.0.0.0”, “–”, “–headers”, “Cross-Origin-Opener-Policy=same-origin; Cross-Origin-Embedder-Policy=require-corp”]

save the changes and restart the container:

docker compose build --no-cache && docker compose up app-dev

This solves the problem at least in a dev environment since in production it should work if you activate the SSL certificates.

more info to add COOP on some more common web servers: Configuring Headers | WebContainers

I have a similar situation in this other thread, I think not just Cors but mainly cloudflare is blocking access to API server. Webscraping is not a viable solution, it needs a core implementation within bolt.diy environment configuration.