0

So I have two applications on seperate servers. One is a frontend machine and one is a backend api. We are using SSL which we are terminating at the load balancer.

My problem is that when the frontend (https://frontend.example.com) makes calls to the backend (https://api.example.com)

I get an issue with CORS. It complains about origins not matching (one being http and one https). This happens even with the Allow-Origin header set to *

Any ideas?

samdunne
  • 306
  • 1
  • 2
  • 14

1 Answers1

1

Try adding the the following header:

headers['Access-Control-Request-Method'] = '*'

Here's a relevant question: Allow anything through CORS Policy

Community
  • 1
  • 1
Jorge Marques
  • 616
  • 8
  • 17