CORS issue with 'GraphQL-Features' header

I am trying to use the discussions_api feature with the GraphQL API, but my browser is blocking the request. The preflight comes back with access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Accept-Encoding, X-GitHub-OTP, X-Requested-With, User-Agent which seems to be missing GraphQL-Features. I am asking for that header in the request though: Access-Control-Request-Headers: authorization,content-type,graphql-features.

Am I missing something, or is this on purpose?

1 Like

I am also running into the same issue. As a workaround, I create a serverless function to forward the requests to GitHub.