0

I am working on angular 5 application. my site is working in chrome browser well. when i try to log in mozila firefox. i am getting the following CORS exception. please help me with it.

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://00.000.000.00/login (this is server url). (Reason: missing token ‘access-control-allow-headers’ in CORS header ‘Access-Control-Allow-Headers’ from CORS preflight channel).

code:

const header = {
      headers: new HttpHeaders({
        'content-Type': 'application/json',
        'accept':'application/json'
 }),
      'responseType': 'text' as 'text',
 }

it is working chrome browser. but it is not working in firefox browser. can you tell me the reason?

Kumaresan Perumal
  • 53
  • 3
  • 10
  • You can't set CORS headers to give yourself permission to access another server in the code you use to make the request! That would be stupid! The server you are requesting permission from has to grant you permission. – Quentin Jun 07 '18 at 10:15
  • const options = { headers: new HttpHeaders({ 'Content-Type': 'application/json', 'Accept': 'application/json' }), 'responseType': 'text' as 'text', }; return options; – Kumaresan Perumal Jun 07 '18 at 10:19
  • @Quentin this is my header. can you help me with it? – Kumaresan Perumal Jun 07 '18 at 10:20
  • hi i have a doubt. it is working in chrome but why it is not working in mozila firefox. can you tell me please? – Kumaresan Perumal Jun 07 '18 at 11:27

1 Answers1

0

Instead of using *, use the exact headers you want. Example:

Origin, X-Requested-With, Content-Type, Accept, Authorization

If you're working with Express, or a derivative, here's an example configuration for a middleware return value:

return (req, res, next) => {
  res.header('Access-Control-Allow-Origin', 'your-domain');
  res.header('Access-Control-Allow-Methods', 'DELETE, GET, POST, PUT, OPTIONS');
  res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept, Authorization');
  res.header('Access-Control-Allow-Credentials', true);

  next();
};
Brandon Taylor
  • 33,823
  • 15
  • 104
  • 144