http://localhost:4200' has been blocked by CORS policy: Response to preflight request doesn't pass

Question

I have a problem that I can't seem to figure out. I want to send a http params request from my Angular client to server using below code but I am getting exception:

http://localhost:4200' has been blocked by CORS policy: Response to preflight request doesn't pass

I want clarity about it, did I make any mistakes in Angular or is this a server side problem?

Auth:

login(username: string, password: string) {
    let params = new HttpParams();
    params = params.append('email', username);
    params = params.append('password', password);
    return this.http.post<any>('URL',{params:params})
      .pipe(map(user => {
        if (user && user.token) {
        }
      }),
        catchError(this.handleError)
      );
  }

Possible duplicate of [Response to preflight request doesn't pass access control check](https://stackoverflow.com/questions/35588699/response-to-preflight-request-doesnt-pass-access-control-check) — JJJ, Dec 12 '18 at 06:22
@AbhiRam Check this: https://stackoverflow.com/questions/53087341/the-access-control-allow-origin-header-has-a-value-http-localhost4200-tha/53683422#53683422 — Saddam Pojee, Dec 12 '18 at 09:44

score 0 · Answer 1 · answered Dec 12 '18 at 06:22

0

Yes, This is server-side problem not client side.

You need to enable CORS for your localhost from server side in order to consume API's from your Angular code.

PS: For a quick fix you can install chrome plugin to enable CORS but this is not recommended approach ever.

answered Dec 12 '18 at 06:22

Pardeep Jain

71,130
29
141
199

So probably you should go for exact fix that is enable CORS from backend – Pardeep Jain Dec 12 '18 at 06:27

score 0 · Answer 2 · answered Dec 12 '18 at 06:32

0

Modify your server to add the header Access-Control-Allow-Origin: * to enable cross-origin requests from any domains.

answered Dec 12 '18 at 06:32

Farhad Lavaei

432
4
7

score 0 · Answer 3 · edited Jan 09 '20 at 17:53

0

Add configuration in VSCode before run your application(F5)

"runtimeArgs": ["--disable-web-security"]

in launch.json file

edited Jan 09 '20 at 17:53

Dane Brouwer

1,974
1
17
21

answered Jul 15 '19 at 09:01

abinthomas12914

569
4
7

http://localhost:4200' has been blocked by CORS policy: Response to preflight request doesn't pass

Auth:

3 Answers3