Embedding UI in Home Assistant works

[lsmoker]

I'm running BIrdNET-Go on one server and embedding its UI in my Home Assistant UI on another server using the BNG allowembedding option. Viewing the BNG UI is working fine. The only things that don't work are updates from the HA UI back to BNG like updating settings or reading notifications (which tries to mark them as 'read'). Is there a way to allow updates (HTTP POST requests) in this scenario?

[itxashancode]

http:
address: ":8080"
base_path: ""
allow_embedding: false
cors_allow_origin: ""

If allow_embedding true sets appropriate headers for framing (maybe X-Frame-Options: ALLOWALL). Or enable CORS via flag --cors-allow-origin. If not sure, suggest checking config.yaml and adding:

http:
allow_embedding: true
cors_allow_origin: "https://home-assistant-url.example.com"

Or if using Docker, set env var BNG_CORS_ALLOW_ORIGIN.g

[lsmoker]

No success.

[itxashancode]

The cors_allow_origin setting might only be handling GET. Check if BirdNET-Go has separate headers for Access-Control-Allow-Methods and Access-Control-Allow-Headers, POST requests also need those, plus a preflight OPTIONS response.
If you have access to a reverse proxy (nginx, Caddy, etc.) in front of BirdNET-Go, you can add the CORS headers there manually:

nginx
add_header Access-Control-Allow-Origin "https://your-ha-url";
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
add_header Access-Control-Allow-Headers "Content-Type";

Also worth checking: open browser devtools when you trigger one of the failing POST requests and look at the exact error. If it says "blocked by CORS policy" vs "network error" vs a 4xx/5xx, that'll narrow it down. What does the console show?

[itxashancode]

If the issue is resolved, could you close the discussion and mark my comment as the answer?
I’m working toward my Galaxy Brain badge also, a follow would be appreciated!