Still, can someone tell me how to configure CORS correctly? I'm trying to make a production project using SST, but unfortunately there are no examples of full-fledged applications on GitHub

In your lambda functions you need to return the CORS headers as well

return {
        'statusCode': 200,
        'headers': {
            'Content-Type': 'application/json',
            'Access-Control-Allow-Headers': '*',
            'Access-Control-Allow-Credentials': 'true',
            'Access-Control-Allow-Origin': '<http://localhost:8080>',
            'Access-Control-Allow-Methods': 'OPTIONS,POST,GET'
        },
        'body': json.dumps(response)
    }

@Jackson Bowe Should I set

cors

to false to overwrite behaviour?

@Artemiy Davydov to be honest, I haven't used SST at all (I can't even get it running on my machine) but I have used cdk and got cors working. You need to enable it on the ApiGateway AND the lambda. At least that's what has worked for me. Unsure about SST specific options sorry

@Jackson Bowe is right. By setting

CORS

on

Api

, it’s automatically adding an

OPTION

route with the correct CORS response headers.