URL scheme must be "http" or "https" for CORS request

Issue

• CORS errors "Failed to fetch" when accessing headless APIs through the API Explorer.

Environment

• Liferay DXP 7.4 

Resolution

• CORS issues arise from mismatches between the origin of the API request and the allowed origins configured in Liferay.
• If the issue persists even after configuring CORS in Liferay and affects all APIs, the issue might be due to web server misconfiguration.
  • Web Server Configuration: When Liferay is behind a web server (like Apache or Nginx), ensure that the web server is properly configured to forward requests to the correct port and handle CORS headers.
  • Verify API Access Directly: Bypass the webserver temporarily and try accessing the APIs directly using the server's IP address and port. This helps isolate whether the web server is the source of the issue.
  • portal-ext.properties: Add or verify the following properties in your portal-ext.properties file. These properties ensure Liferay recognizes the correct host, protocol, and port when behind a proxy or load balancer:

    web.server.forwarded.host.enabled=true
    web.server.forwarded.protocol.enabled=true
    web.server.forwarded.port.enabled=true
    

Additional Information

• Setting Up CORS