Bad request 400 - HTTP API

[Peter B.]

Hi, we are using http api / base auth in our web application to communicate with Logic Machine.  Everything worked just fine, but with latest LM fw update, we cannot log in from the web app to the LM anymore. Basically the CORS setting works ok, we have set the domain of the web app in the Services / Http server screen. The OPTIONS request from the web app gets the response 200 -> OK, but the following GET request just dies, LM returning an 400 - Bad request error. 
Nothing is logged anywhere, nor in the nginx error log (debug level). 
We traced that the request hits the lp-handler.lua, but what happens there is unknown (it's either bytecode, or otherwise not readable).
Before the introduction of the CORS setting in the system menu of the LM, the web app was working fine.
Our LM version:
HW: LM5 Lite (i.MX6)
SW: 20211215

Does anybody have similar experience? What would you suggest as next step in debugging? Is it possible to obtain the lp-handler.lua source?

Thank you for any help or suggestion.
Peter

[admin]

CORS seems to broken in this firmware. We can provide beta firmware with fixed CORS.

[Peter B.]

Hi, ok, that would be much appreciated. Thank you.

[Peter B.]

Hi. When aproximately can we expect this new FW please? 
Do you have my email address? Thx.

[admin]

Beta FW will be ready by the end of this week. Should it be sent to the email that you use for your forum account?

[Peter B.]

Beta FW will be ready by the end of this week. Should it be sent to the email that you use for your forum account?

Yes, please. Thank you.

[Zen]

Hi admin, can you share the firmware here too? We got this problem too and we wanna try solve it.

[admin]

This is beta FW for LM5M3: https://dl.openrb.com/lm-22-imx6/lm5m3-20220922.img
If you need it for another HW model then let me know.

[Zen]

This is beta FW for LM5M3: https://dl.openrb.com/lm-22-imx6/lm5m3-20220922.img
If you need it for another HW model then let me know.

Thanks for the fast response, our HW is LM5 Lite (i.MX6)

[Daniel]

Then you good to go with this version.

[Zen]

Then you good to go with this version.

Thank you. We will go further try this and i'll let you know if we unlock the situation.

Is there any guide about the 4 CORS origin string available to be written under the HTTP Server section in the LM5 config, eventually? 

Please let me know.
BR

[Zen]

Is there any guide about the 4 CORS origin string available to be written under the HTTP Server section in the LM5 config, eventually? 

Any news about this?

Is there any guide about the 4 CORS origin string available to be written under the HTTP Server section in the LM5 config, eventually? 

Please let me know.
BR

[Daniel]

Google is your friend
https://en.wikipedia.org/wiki/Cross-orig...ce_sharing
CORS origin 1 – 4
Up to 4 IP addresses/hosts which can use CORS