Cannot play radio stream through Navidrome due to CORS policy

[puffinjr]

First off, I'm very impressed with ampcast.app and appreciate the service you provide.

I am unable to play certain radio streams on ampcast.app due to a Cross-Origin Resource Sharing (CORS) policy blocking access to the audio source. Specifically, I've observed this with streams originating from https://streams.greenhost.nl:8006/live (or similar URLs)

Steps to Reproduce:

• Navigate to ampcast.app.
• Attempt to play the radio station: in my case, Concertzender.
• Observe that the audio does not play.
• Open the browser's developer console.

The radio stream fails to load and play. The browser console displays CORS-related errors, such as:

Workaround (Temporary):
I was able to successfully play the stream by installing and enabling a browser extension called "Allow CORS: Access-Control-Allow-Origin" (or similar), which bypasses CORS restrictions locally. However, this is not an ideal solution for end-users, as it requires disabling a browser security feature.

Browser: Brave 1.79.119, Chromium 137.0.7151.68
Operating System: Windows 11 Version 24H2 (Build 26100.4061)
Device: Windows Laptop

[rekkyrosso]

Navidrome also can't play this stream.

I can't really fix this in my app without breaking lots of security rules. It's blocked by the provider who prefer that it is played by websites that they've allowed.

Do you mind if I close this as 'unfixable'?

[puffinjr]

I tested it; the stream actually does play on Navidrome and other clients (Airsonic & SubPlayer). As far as I know, this issue is specific to how ampcast handles the stream.

The workaround through the extension is fine. I just wanted to let you (and maybe others) know.

Sure, you can close this issue if you would like to.

[rekkyrosso]

I can't get it to play on the Navidrome web client. Does it require the same browser extension? Or are you using a different player?

[puffinjr]

The stream, https://streams.greenhost.nl:8006/live, is in a secure context (HTTPS), so if you're trying to run it through an insecure server like http://localhost:4533, I fear you won't have much luck. HTTP requests from a secure HTTPS page will be blocked by your browser.

Here's a look at it working in the Navidrome client

Screen.Recording.2025-06-12.014053.mp4

[rekkyrosso]

Okay. I'll look into it some more.