Cross-Origin Request Blocked
Sundaresan-JSE-PMS opened this issue · comments
Hi,
I'm running the LinuxForHealth server as a docker image as mentioned in the readme. The thing is that when I use curl or postman to send requests and receive responses, it is working perfectly fine.
But when I try to do the same from a browser, I'm getting the following error:
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at ‘https://localhost:9443/fhir-server/api/v4/Device’. (Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’).
Can anyone help me with this? I know this is caused due to the browser trying to prevent CSRF attacks. But other than that, I don't know much.
Thanks,
Sundaresan
Issue solved guys (for now). I just changed value attributed to the credentials in my source code to omit. This fixes the problem for now. But I don't know how secure it is (I omitted something, so that means there was something there to be omitted which could very well be a security patch or fix). So if you have any comments, please let me know. Thanks.