routeRoules cors: true does not work for /api routes

[MickL]

Environment

• Operating System: Darwin
• Node Version: v21.6.1
• Nuxt Version: 3.9.1
• CLI Version: 3.10.0
• Nitro Version: 2.8.1
• Package Manager: [email protected]
• Builder: -
• User Config: devtools, css, modules, runtimeConfig, ignore, i18n, routeRules, vite, nitro
• Runtime Modules: @nuxtjs/[email protected], [email protected], [email protected]
• Build Modules: -

Describe the bug

Settings cors: true works for routes in the public folder but not in /api:

routeRules: {
    '/my-public-folder': {
      cors: true,
    },
    '/api/my-api-function': {
      cors: true
    },
  },

Workaround

Use nuxt-security module:

routeRules: {
    '/my-public-folder': {
      cors: true,
    },
    '/api/my-api-function': {
      security: {
        corsHandler: {
          origin: '*',
          methods: '*',
          allowHeaders: '*',
          exposeHeaders: '*',
        },
      },
    },
  },

Logs

No response

[danielroe]

Would you see if you can reproduce this in pure Nitro (reproduction sandbox), and if so, raise there? 🙏

[MickL]

It is not working for Nitro as well, issue: unjs/nitro#2340

[danielroe]

Let's track in the nitro issue - it's not a Nuxt-specific issue.