I have a springboot-backend-api behind Cloudflare. It’s configured to cache everything and to respect existing headers.
If I call my endpoints directly everything is fine.
The response header from Cloudflare says HIT, my backend-api access-log also confirms that no requests are received.
When my react-app makes a cors-request to the same endpoint something peculiar happens
I still get a HIT from Cloudflare, but my backend also receives the request. Cloudflare however is still serving the cached object, ignoring the request it just made.
Is there a reason why Cloudflare would “bleed” requests like this on cors-requests?