Simple POST request works in Postman but not in browser

I am experiencing an issue where a POST endpoint is returning a response when run in Postman but not when running it in the browser.

I have setup an API endpoint on AWS via serverless. Here is the .yml config for that:

service: tableau-export-rest
provider: name: aws runtime: nodejs10.x region: eu-west-1 stage: ${opt:stage, 'dev'} timeout: 900 memorySize: 3008
functions: storeExportFiters: handler: index.storeExportFiters events: - http: path: /store-export-filters method: post cors: true 

The endpoint resolver storeExportFiters (which is a lambda) for now just returns a success message:

module.exports = (event, ctx, cb) => { return cb(null, { statusCode: 200, body: JSON.stringify({ worked: true }) });
}

When I deploy this to AWS and try hitting the endpoint from Postman via a POST request with no body or anything it sends me the response fine. When I try do it in the browser however I get a cors error:

Access to XMLHttpRequest at '' from origin '' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Here is the browser code used to try get a response from the endpoint. I am using Axios for the http request:

 axios.post(') .then(function (response) { console.log(response); }) .catch(function (error) { console.log(error); });

I can't see why I would be getting a CORS error here especially as it works in Postman on my machine.

1 Answer

Your API is not configured for cross origin requests. You need to configure your server to allow these requests.

Access-Control-Allow-Origin: *

This will allow your API to receive requests from any origin, however can be a major security issue.

Configuring your API to accept requests only from specific origins fixes this issue.

Access-Control-Allow-Origin: hostname:port
6

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

You Might Also Like