feat: add catchall options route

Author: Bulletdev

config/routes.rb

@@ -1,6 +1,9 @@
 # frozen_string_literal: true
 
 Rails.application.routes.draw do
+  # Handle CORS preflight requests (OPTIONS) for all routes
+  match '*path', to: proc { [204, {}, ['']] }, via: :options
+
   # Mount Rswag API documentation
   mount Rswag::Ui::Engine => '/api-docs'
   mount Rswag::Api::Engine => '/api-docs'

nginx/app.conf

@@ -43,15 +43,15 @@ server {
   access_log /var/log/nginx/app.access.log detailed;
   error_log /var/log/nginx/app.error.log warn;
 
-  # CORS Headers
+  # CORS Headers (applied to all responses)
   add_header Access-Control-Allow-Origin $cors_origin always;
   add_header Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD" always;
   add_header Access-Control-Allow-Headers "Authorization, Content-Type, Accept, Origin, X-Requested-With, X-Request-Id" always;
   add_header Access-Control-Allow-Credentials "true" always;
   add_header Access-Control-Max-Age 86400 always;
 
-  # Handle preflight OPTIONS requests
-  if ($request_method = OPTIONS) {
+  # Handle preflight OPTIONS requests for all paths
+  location @cors_preflight {
     add_header Access-Control-Allow-Origin $cors_origin always;
     add_header Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD" always;
     add_header Access-Control-Allow-Headers "Authorization, Content-Type, Accept, Origin, X-Requested-With, X-Request-Id" always;
@@ -155,6 +155,11 @@ server {
 
   # Authentication endpoints - moderate rate limiting
   location ~ ^/api/(auth|login|logout|signup) {
+    # Handle OPTIONS preflight
+    if ($request_method = OPTIONS) {
+      return 204;
+    }
+
     limit_req zone=general_api burst=30 nodelay;
 
     proxy_pass http://puma_rails_app;
@@ -174,6 +179,11 @@ server {
 
   # General API endpoints
   location /api/ {
+    # Handle OPTIONS preflight
+    if ($request_method = OPTIONS) {
+      return 204;
+    }
+
     limit_req zone=general_api burst=100 nodelay;
 
     proxy_pass http://puma_rails_app;