API blocked by CORS policy No 'Access-Control-Allow-Origin' header is present

duraisankar

I planning to show the recent Flarum discussions in my WP blog (onestoppega.com)
I am using this endpoint to fetch recent discussion.
https://ask.onestoppega.com/api/discussions?page[limit]=15

But it is throwing these errors.

 Access to XMLHttpRequest at 'https://ask.onestoppega.com/api/discussions?page[limit]=15' from origin 'https://onestoppega.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
ask.onestoppega.com/api/discussions?page[limit]=15:1 Failed to load resource: net::ERR_FAILED

I am accessing from the same domain. How can I fix this?

clarkwinkelmann

duraisankar from a CORS standpoint https://onestoppega.com and https://ask.onestoppega.com are different domains.

You can setup the required access control headers on your ask subdomain via Apache/nginx rules. Or you can also go fancy and add the header via the Flarum extension API and middlewares.

duraisankar

Thanks. Adding below code in my .htaccess worked.

<IfModule mod_headers.c>
    Header set Access-Control-Allow-Origin "*"
</IfModule>