Я создал API, который получает сообщение из формы из отдельного домена.Когда я использую POSTMAN в разделе Заголовки
Content-Type:application/x-www-form-urlencoded
X-Requested-With:XMLHttpRequest
И это работает, когда я добавляю в значения POST.Но когда я добавляю его на рабочий сервер ajax:
$.ajax({
type: "POST",
headers: {"Content-Type": "application/x-www-form-urlencoded","X-Requested-With": "XMLHttpRequest","Access-Control-Request-Headers": "*","Access-Control-Request-Method": "*"},
url: "https://sample/test/t/start",
data: frmData
}).done(function (data) {
console.log(data);
});
// XMLHttpRequest preflight request
var xhr = new XMLHttpRequest();
xhr.open("POST", "https://sample/test/t/start", true);
xhr.setRequestHeader("X-Requested-With", "XMLHttpRequest");
xhr.onload = function () {
console.log(xhr.responseText);
};
xhr.send();
// Fetch preflight request
var myHeaders = new Headers();
myHeaders.append("X-Requested-With", "XMLHttpRequest");
fetch("https://sample/test/t/start", {
headers: myHeaders
}).then(function (response) {
return response.json();
}).then(function (json) {
console.log(json);
});
Это ошибки из вышеперечисленного я получаю
Access to XMLHttpRequest at 'https://sample/test/t/start' from origin 'https://otherdomain.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
Access to fetch at 'https://sample/test/t/start' from origin 'https://otherdomain.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.