[wp-trac] [WordPress Trac] #62232: WordPress Application Password CORS error when Headless WordPress URL and Site URL are different

[WordPress Trac]

#62232: WordPress Application Password CORS error when Headless WordPress URL and
Site URL are different
--------------------------+-----------------------------
 Reporter:  archoda       |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  REST API      |    Version:  6.6.2
 Severity:  critical      |   Keywords:  has-screenshots
  Focuses:  ui, rest-api  |
--------------------------+-----------------------------
 I'm working on a headless websites locally. The WordPress ( Back-end ) Url
 and the Site ( Front-end ) are different...

 Ex:
 Back-end url: http://wordpress.local
 Front-end url: http://mysite.local

 When I go to my main admin user, and try and generate a password, the UI
 shows a slim red/error bar & metabox under the 'Add New Application
 Password' ui field, w/ no text. There's also no PHP error logs. However,
 in the devtools issues panel, i am seeing a CORS error. Instead of
 WordPress calling http://wordpress.local/wp-json/wp/v2 rest endpoint to
 generate the password, it's wrongfully trying to call the front-end
 http://mysite.local instead.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62232>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform