API show 400 Bad Request on Client Side

Mohsin Arif

6y3.8k.NET

Hello all.

there is a api which is given to me for integration in my application. but i dont know what strtegy they has been followed when this made. only url and headers are given to me.

when i integrate in my MVC project i have issue of Cross-Origin detail are in snapshot, i googled alot of time and as every one folllowed the strategy i modified my code but result is same. so please any one help me to fix this issue

code is below

<script>
$(document).ready(function () {
$('#btnLoad').click(function () {
$.ajax({
url: url,
headers: {
'Access-Control-Allow-Origin': '*',
"Authorization": "Bearer + token"
},
success: function (response) {
$.toaster({ priority: "success", title: "Congrat!", message: "Data loading...." });
console.log(response);
},
error: function () {
$.toaster({ priority: "danger", title: "oooppss!", message: "failed" });
}
});
})
})
script>

Error snpashot is attached

thanksin advance

more over when this api check by postman it fine.

6 Replies

Know the answer? Post it — somebody with the same question will find it here.

Jaimin Shethiya6y ago
Hello,

can you please refer below link

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/enabling-cross-origin-requests-in-web-api

Thanks
0
Gopaiah Nekarukanti6y ago
If you not try the below one, check it... may helpful to you.

Check part Fix two: send your request to a proxy

https://medium.com/@dtkatz/3-ways-to-fix-the-cors-error-and-how-access-control-allow-origin-works-d97d55946d9
https://github.com/Rob--W/cors-anywhere/#documentation
0
Mohsin Arif6y ago
Gopaiah Nekarukanti

i already did this but same issue,
0
Gopaiah Nekarukanti6y ago
You are making a request to external domain https://api.XXXXXX from your local that is why it is giving cross origin exception. Either you have to allow headers Access-Control-Allow-Origin:* in both front end and backend or alternatively use this extension cors header toggle - chrome extension unless you host backend and front end on the same domain

for now you can add below extension and try.

https://chrome.google.com/webstore/detail/allow-cors-access-control/lhobafahddgcelffkeicbaginigeejlf?hl=en

But as per my knowledge need to allow your domain at server side for now or should allow All, but once it goes to live if both Api and client are on same server it is not required we can impose restrictions when it goes to live.

https://enable-cors.org/server_iis7.html
0
Mohsin Arif6y ago
Dear
Gopaiah Nekarukanti
but this is not my hand, they said we are resposible only to get rsponse on postman. and you are getting result on postman
0
Gopaiah Nekarukanti6y ago
Need to Enable cross-origin requests at server side(at API side).

Refer the below links for information.

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/enabling-cross-origin-requests-in-web-api
https://enable-cors.org/server_aspnet.html

0