CORS annotation problem

[bigcat88]

AppAPI authentication does not work with Notes app endpoints because they are not regular OCS endpoints.

https://github.com/nextcloud/server/blob/d215d8091699b39763c6c5d23b5125b7734c19f7/lib/private/AppFramework/Middleware/Security/CORSMiddleware.php#L80-L103

Possible options:

1. Add to Notes OCS Api
2. Modify CORSMiddleware

[bigcat88]

AppAPI authentication does not work with Notes app

And not only Notes, there are a bunch of NC apps, that provide REST API protected by CORS, that should be available for AppAPI apps.