I expanded the zammad.conf with all privileges i found:
add_header ‘Access-Control-Allow-Methods’ ‘GET,OPTIONS,PUT,DELETE’ always;
add_header ‘Access-Control-Allow-Credentials’ ‘true’ always;
add_header ‘Access-Control-Allow-Origin’ ‘$http_origin’ always;
add_header ‘Access-Control-Allow-Headers’ ‘Authorization,DNT,User-Agent,Keep-Alive,Content-Type,accept,origin,X-Requested-With’ always;
add_header ‘Access-Control-Expose-Headers’ ‘Authorization,DNT,User-Agent,Keep-Alive,Content-Type,accept,origin,X-Requested-With,Content-Disposition’ always;
But Firefox degugger says:
Request URL:http://localhost/api/v1/users
Request method:OPTIONS
Remote address:127.0.0.1:80
Status code: 404
Version:HTTP/1.1
Requested header:
OPTIONS /api/v1/users HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0
Accept: /
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,content-type
Origin: null
Connection: keep-alive
Cache-Control: max-age=0
Firefox Header as curl:
curl ‘http://localhost/api/v1/users’ -X OPTIONS -H ‘User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:67.0) Gecko/20100101 Firefox/67.0’ -H ‘Accept: /’ -H ‘Accept-Language: en-US,en;q=0.5’ --compressed -H ‘Access-Control-Request-Method: GET’ -H ‘Access-Control-Request-Headers: authorization,content-type’ -H ‘Origin: null’ -H ‘Connection: keep-alive’ -H ‘Cache-Control: max-age=0’
No more ideas now…