Hacker News new | ask | show | jobs
by zelly 2321 days ago
Just change the Access-Control-Allow-Origin header. Am I missing something?
1 comments
wefarrell 2321 days ago
Access-Control-Allow-Credentials too and it needs to be configured on both the client and the server.
link
zelly 2321 days ago
If the API is not yours, why not set up a proxy on your domain (where you can change the origin header)? Envoy, nginx, etc.
link