search

LinuxForHealth / FHIR

The LinuxForHealth FHIR® Server and related projects
https://linuxforhealth.github.io/FHIR
Apache License 2.0
333 stars 156 forks source link

Cross-Origin Request Blocked #4213

Closed Sundaresan-JSE-PMS closed 1 year ago

Sundaresan-JSE-PMS commented 1 year ago

Hi, I'm running the LinuxForHealth server as a docker image as mentioned in the readme. The thing is that when I use curl or postman to send requests and receive responses, it is working perfectly fine. But when I try to do the same from a browser, I'm getting the following error: Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at ‘https://localhost:9443/fhir-server/api/v4/Device’. (Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’).

Can anyone help me with this? I know this is caused due to the browser trying to prevent CSRF attacks. But other than that, I don't know much.

Thanks, Sundaresan

Sundaresan-JSE-PMS commented 1 year ago

Issue solved guys (for now). I just changed value attributed to the credentials in my source code to omit. This fixes the problem for now. But I don't know how secure it is (I omitted something, so that means there was something there to be omitted which could very well be a security patch or fix). So if you have any comments, please let me know. Thanks.