I have a REST API that's running on localhost (flask app) that I'd like to access with a cockpit plugin. I've done a few initial tests but I'm finding it difficult to navigate the CORS and Content-Security-Policy - so before I invest any more time in this, I thought I'd ask the dumb question first.

Is this goal achievable? Can a cockpit plugin access a REST API running on the same host - if so, could someone provide some guidance, or point me at some docs?

I'm testing on Fedora, but the longer term goal is to use RHEL.

Any help appreciated!

Paul C