Skip to main content
POST
/
v1
/
storage
/
configure-cors
curl -X POST https://api.verbalisai.com/v1/storage/configure-cors \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "allowedOrigins": ["https://example.com", "https://app.example.com"],
    "allowedMethods": ["GET", "POST", "PUT"],
    "allowedHeaders": ["Content-Type", "Authorization"],
    "maxAgeSeconds": 7200
  }'

{
  "success": true,
  "message": "CORS configuration updated successfully",
  "data": {
    "allowedOrigins": ["https://example.com", "https://app.example.com"],
    "allowedMethods": ["GET", "POST", "PUT"],
    "allowedHeaders": ["Content-Type", "Authorization"],
    "maxAgeSeconds": 7200,
    "updatedAt": "2024-01-15T10:30:00Z"
  }
}
Configure Cross-Origin Resource Sharing (CORS) settings for your storage bucket to control browser access to your files.
This endpoint requires authentication via API key.

​
Configure CORS

​
allowedOrigins
array
required
Array of allowed origins (e.g., [“https://example.com”, “https://app.example.com”])
​
allowedMethods
array
Array of allowed HTTP methods (default: [“GET”, “POST”, “PUT”, “DELETE”])
​
allowedHeaders
array
Array of allowed headers (default: [”*”])
​
maxAgeSeconds
number
Maximum age for preflight cache in seconds (default: 3600)
curl -X POST https://api.verbalisai.com/v1/storage/configure-cors \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "allowedOrigins": ["https://example.com", "https://app.example.com"],
    "allowedMethods": ["GET", "POST", "PUT"],
    "allowedHeaders": ["Content-Type", "Authorization"],
    "maxAgeSeconds": 7200
  }'

{
  "success": true,
  "message": "CORS configuration updated successfully",
  "data": {
    "allowedOrigins": ["https://example.com", "https://app.example.com"],
    "allowedMethods": ["GET", "POST", "PUT"],
    "allowedHeaders": ["Content-Type", "Authorization"],
    "maxAgeSeconds": 7200,
    "updatedAt": "2024-01-15T10:30:00Z"
  }
}

​
Get CORS Configuration

Retrieve the current CORS configuration for your storage bucket. 
curl -X GET https://api.verbalisai.com/v1/storage/cors-config \
  -H "Authorization: Bearer YOUR_API_KEY"

{
  "success": true,
  "data": {
    "allowedOrigins": ["https://example.com", "https://app.example.com"],
    "allowedMethods": ["GET", "POST", "PUT"],
    "allowedHeaders": ["Content-Type", "Authorization"],
    "maxAgeSeconds": 7200,
    "lastUpdated": "2024-01-15T10:30:00Z"
  }
}

​
Response Fields

​
success
boolean
Indicates if the request was successful
​
data
object

​
Notes

  • CORS configuration affects browser access to your stored files
  • Wildcard origins (”*”) should be used carefully in production
  • Changes may take a few minutes to propagate
  • Invalid configurations will be rejected with detailed error messages
⌘I