Blog
Vue composables and useFetch: CORS in the browser, Nuxt server routes, and SSR without leaking cookies
Nuxt can proxy API calls during SSR—browser clients still need CORS when hydrating and calling APIs directly.
1 min read
vuenuxtcors
Pinia stores
Stores initialized on server and client must agree on which base URL triggers preflight.
Persisted state plugins should not embed raw tokens readable from other origins via XSS.
Vite integration
Nuxt 3 Vite dev server inherits the same proxy patterns as plain Vite—keep CORS rules synchronized.
Module federation remote entries need Allow-Origin on manifest URLs as well as API hosts.