enabling CORS from controller of angular JS

Question

I have a controller with service that would get the json from other server and i came to this

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http:somesite.com. This can be fixed by moving the resource to the same domain or enabling CORS.

I notice that some of the same issue would be fix by "Access-Control-Allow-Origin": "*" in header my in my case I don't see any progress on fixing it.

this the code for my controller :

var myApp = angular.module('cplanner',[]);

myApp.controller('GetItemCtrl', ['$scope', '$http', function($scope, $http) {

    var itemUrl = 'http:somesite.com';

    //console.log(itemUrl);
    $http({url: itemUrl,
    dataType: 'json',
    method: 'POST',
    dataType : 'json',
    headers: {
       "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "POST, GET, OPTIONS, PATCH, DELETE",
       "Access-Control-Allow-Headers": "Origin, X-Requested-With, Content-Type, Accept"
    },
    xhrFields: {
        withCredentials: true
    }}).success(function(data, status, headers, config) {
        //check if the response has ok status
        if(data.status == "ok"){
        console.log(data.data);
            $scope.items = data.data;
        }


        }).error(function(data, status, headers, config) {


    });

}]);

I added the header but it seem not to fix my cross origin issue. Could anyone drive me by any comments and suggestion on how am i able to get the response from another server source. thank you in advance.

Tomer · Accepted Answer · 2014-10-30 06:05:40Z

2

CORS is a server solution - that is - the first request a web client (JS) sends to a different domain (hence cross domain) is an OPTIONS request - which is replied by the origin server with weather or not it respect cross domain requests, if so it answers:

   "Access-Control-Allow-Origin": "*",
   "Access-Control-Allow-Methods": "POST, GET, OPTIONS, PATCH, DELETE",
   "Access-Control-Allow-Headers": "Origin, X-Requested-With, Content-Type, Accept"

Then the browser sends another request - the actual request that was meant to be sent. This whole mechanism takes place automatically. All you have to do is enabling CORS on your server. To enable CORS, here are some useful links:
ASP.NET WEBAPI
APACHE

answered Oct 30, 2014 at 6:05

Tomer

4,4915 gold badges41 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-05-23 12:14:34Z

0

CORS is something that has to be enabled on the server. If you don't have access to that server you probably won't be able to do what you were hoping. If you do have access you'll need to read up on how to enable it for whatever language the api was written in :)

See here for more info: CORS request is not allowed with AngularJS

edited May 23, 2017 at 12:14

CommunityBot

11 silver badge

answered Oct 30, 2014 at 6:00

John

6,6014 gold badges41 silver badges59 bronze badges

6 Comments

CaffeineShots Over a year ago

I see, but i dont have access to my server, is it possible doing this in htaccess?

John Over a year ago

@caffeineshots can you use JSONP or something else? Do you mean htaccess on your web server or the api server?

CaffeineShots Over a year ago

htaccess in my local folder, would it help? I don't want to use jsonp for some reason.

John Over a year ago

@caffeineshots no, its a server setting that has to be done on the server providing the API. You could try calling the API from your server and then providing the same data from your own API to your client if they allow that (proxying their API)

CaffeineShots Over a year ago

I see.the thing is my client wanted just to click the index.html file and see the result. do you have any idea what will be my workaround in that case?

|

Collectives™ on Stack Overflow

enabling CORS from controller of angular JS

2 Answers 2

Comments

6 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

6 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related