[SOLVED] Flutter Web : CORS Header has a value 'https://localhost'

Flutter web, deployed on prod server, when trying to create an anonymous session the header for some reason is https://localhost, that gets blocked by cors, even though I have changed the appwrite API endpoint to the prod server in the constants file in my project ??? Not sure what I am missing,

TL;DR

The issue is with CORS (Cross-Origin Resource Sharing) headers in a Flutter Web project. The response header is showing "access-control-allows-origin: https://localhost" instead of the desired app URL. The solution is to add multiple web platforms like "*.example.com", "example.com", and "www.example.com" to the project configuration. This should resolve the issue and allow the app to work properly.

Have you added the prod server url as web/flutter web platform in the project overview page?

I did, added a wildcard domain *.myapp.com

One last check

Did you also updated the project id?

You'll get CORS when project is is mismatched

What exactly are the full browser console logs and what are the request headers for the failed request?

Sorry for the late response. The console log is "CORS Allow Origin Not Matching Origin". Looking at the request header the Request Headers Origin is my apps URL but Response headers has " access-control-allows-origin: https://localhost"

So the request header origin mismatches the response header allow origin. Now the question is why is the response header origin localhost. Found nothing is .env file. Looked at the platform and that's also also added flutter web *.myapp.com ..

I hope in don't need to add both. Just have flutter web added. Also dont have any custom domains configured but did the domain SSL via .env file .. Could no custom domain be causing appwrite server to respond with origin localhost ?