I've had users report errors that started happening this morning (Sep 1). Based on the browser console screenshots they provided, some of the API responses are missing CORS headers (specifically, access-control-allow-origin). This completely breaks functionality on our website because we make API requests from the browser rather than via a backend. It looks like it was due to a change/rollout in the API, since it started affecting a subset of users earlier and is now affecting everyone. It's only happening for activity APIs, such as the steps/distance timeseries. Other APIs like sleep and heart timeseries are unaffected.
... View more