CORS Error when accessing resources

MIP
, ,
1

I’ve added the needed values to “Access-Control-Allow-Origin” value=" but still get the below error.

Access to XMLHttpRequest at ‘https://video6.com/XProtectMobile/Communication’ from origin ‘http://localhost:3000’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

More Info:

Chrome - Version 140.0.7339.133 (Official Build) (x86_64)

login xml request log

<?xml version="1.0" encoding="utf-8"?>2f531c60-5600-4046-b1d9-41095700c89fRequestLogIn
2

Try to use this knowledge base article.

https://developer.milestonesys.com/s/article/XProtect-Mobile-Server-app-on-different-server-CORS

If this does not lead you to a solution let us know.

3

Thank you for responding Bo, I followed that article earlier this week and added more values to the add key=“Access-Control-Allow-Origin” value=" line in the mobile server config file which seemed to resolve the issue, but the next day we got the same error.

4

Hi Michael. The error suggests that video6.com/XProtectMobile/Communication does not include an Access-Control-Allow-Origin header. When you open the page in your browser, could you check the Network tab inside the developer tools to confirm that the Access-Control-Allow-Origin header is included?

It should look something like this

image
image411×142 10.7 KB

5

Hi Danny,

Under HttpHeaders this is what we have

6

Hi Michael,

Could you please change the value to just the *, without any spaces. There should be no need to comma separate domains when you already allow all domains. I see that you have also commented out the Access-Control-Allow-Methods - I suggest you experiment with enabling that and see if it makes a difference.