Headers are not applied

Traefik Traefik v2 (latest)
,
1

Hello, my headers are not applied but the dashboard is seems correct.

services:
  traefik:
    image: traefik:v2.7
    .........
    labels:
      - traefik.enable=true
     .......
      - traefik.http.middlewares.headers.headers.frameDeny=true
      - traefik.http.middlewares.headers.headers.browserXssFilter=true
      - traefik.http.middlewares.headers.headers.stsIncludeSubdomains=true
      - traefik.http.middlewares.headers.headers.forceSTSHeader=true
      - traefik.http.middlewares.headers.headers.contentSecurityPolicy=true
      - traefik.http.middlewares.headers.headers.accessControlAllowOriginList=https://mydomain.com
      - traefik.http.middlewares.headers.headers.accessControlAllowCredentials=true
    .......
    networks:
      - traefik-network

frontend:
    ...........
    labels:
      - traefik.enable=true
      .......
      - traefik.http.routers.frontend.middlewares=headers
    networks:
      - traefik-network

Screenshot_1
Screenshot_11160×156 10.5 KB

It seems that there are only a few that work (Access-control-allow-credentials: true)

By using online header checkers or checking by myself, headers seems not to be applied. I should see mydomain as CORS origin...

Screenshot_2

Thanks for helping

2

@Shidooo does the Origin header in the request matches the AllowOriginList?
https://mydomain.com in this case

3

@douglasdtm

my backend and frontend are both on the same origin https://mydomain.com
and traefik is on https://traefik.mydomain.com
all on the same server

Does this answer your question? :smile:

4

I still haven't found a solution, I tried to update traefik to version 3.0, the problem still exists.

5

Have you tried adding @docker at the end? As the middleware is defined by provider.docker through the labels.

6

This does not seem to have changed. I still have some of my headers that don't show up as "accessControlAllowOriginList".

7

I believe that only the headers that are already generated by my services are propagated. But the ones I want to add through traefik are not added at all. Even if the interface indicates otherwise.

Any idea ?

Screenshot_4
Screenshot_41433×684 45.2 KB

8

It's still not working.

9

Hello @Shidooo,

Configuration-wise, everything seems ok.

my backend and frontend are both on the same origin https://mydomain.com
and traefik is on https://traefik.mydomain.com all on the same server
Does this answer your question? :smile:

Well, I fear that this is not really answering the question :wink:
I think @douglasdtm wanted to ask you if you did make sure that the request has the Origin header set to the correct value, can you double-check that?
Thanks!

10

I have problems as same as you. I try to upgrade the version but all problems still not working too.

Untitled
Untitled1807×845 75.6 KB

Hello @ rtribotte

I think @douglasdtm wanted to ask you if you did make sure that the request has the Origin header set to the correct value, can you double-check that?

I double-checked the request with many different values all problems still not working.

11

I switch to using customResponseHeaders - (ref.: docs) option like

...
- traefik.http.middlewares.cors.headers.customResponseHeaders.access-control-allow-origin=https://example.com
- traefik.http.middlewares.cors.headers.customResponseHeaders.access-control-allow-credentials=true
...

But this solution only supports one domain I hope will support soon.

12

Hi，Has this issue been resolved?