search

courselab / pollex

Open Source Online Poll Application
GNU General Public License v3.0
1 stars 9 forks source link

CORS policy #39

Open LuisF3 opened 4 years ago

LuisF3 commented 4 years ago

Access to XMLHttpRequest at 'http://0.0.0.0:5000/auth' from origin 'http://localhost:4200' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I'm getting this error when trying to make requests to flask. I need someone to configure flask to allow requests from other domains. I think that, for now, it may be configured to allow any request and, later on, we see what we can do about security.

The CORS (Cross-origin resource sharing) policy is a security measure that blocks any requests from outer domains (in our development environment, localhost:4200 is trying to access 0.0.0.0:5000 and those are different domains). In our case we are going to need it to allow it.

It should be simple so I'm marking as good first issue.

pauloty commented 4 years ago

Done in branch "feature/cors". Is it working right now?