Cloud storage CORS error with custom domain

[devlixo]

Hi,

I have CORS issues when accessing a bucket from a custom domain pointing to my app engine instance. However it works well when accessing from the direct url *.appspot.com. Any idea why it doesn't work?

[alexmoore]

Have a look at this page, it might give some pointers:

https://cloud.google.com/storage/docs/configuring-cors#gsutil

Any questions let me know.

Alex

[devlixo]

Thanks for your answer. I did followed the documentation but I can't understand why I'm getting cors errors when I'm trying to access  the bucket from custom domain like my-custom-domain.com but it does work with *.appspot.com urls. Are there any security limitations?
my-app.appspot.com works but my-custom-domain.com  redirecting to my-app.appspot.com does not work even if the custom domain is authorized in the cors config.

[alexmoore]

What CORS configuration do you have and what request are you making?

[devlixo]

Here's the config:
[
{
"maxAgeSeconds": 3600,
"method": ["GET"],
"origin": ["*"],
"responseHeader": ["Content-Type: application/json"]
}
]
Of course in production we want to be more restrictive on the origin.