Is CORS a replacement for private-object authorization?
No. It controls browser access behavior, not who is authorized to receive a signed operation.
Explore This Question
Search for additional explanations using these tools:
More FAQs in Why can an R2 upload work on the server but fail in the browser?
Still have questions?
Browse all our FAQs or reach out to our support team
