[CORS] No 'Access-Control-Allow-Origin' header is present on the requested resource

[csells]

Describe the bug
The following curl command works:

curl 'https://donjon.bin.sh/name/rpc.cgi?type=Party&n=10'

the equivalent command in postwoman doesn't work:

Desktop (please complete the following information):

• OS: macOS
• Browser chrome
• Version 76

[csells]

BTW, the curl command also works on plain http:// but postwoman doesn't work with a http:// URL either.

[AndrewBastin]

Umm, well its a restriction due to the CORS (Cross Origin Request Policy), there isn't a client side work around to this unless the host your trying to access should respond with the appropriate CORS headers...

More info on CORS : https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

If you really want to circumvent the CORS policies and use Postwoman you can do with Browser extensions which do so, but hey, CORS policies are a security feature hence, overriding it ain't exactly safe...

As I said there isn't like a client-side (using the browser only) way to circumvent this without extensions, although I am pretty sure you could like tunnel the request through a server hosted on the same origin (or passes the CORS headers) and make it work.

Although, anyways, I will try working on a PR which routes any request failing the CORS checks through tunneling servers (something like this or this) but they come with their own restrictions (like what to do about headers for example) and stability issues.

[abraham]

With #15 there is now an error displayed when CORS blocks requests.

[shmurf]

There are browser plugins that you can use to get around the CORS issue but beware, CORS is there for a reason, only use the plugin when debugging or using a site like this
Here is one such plugin
https://chrome.google.com/webstore/detail/moesif-orign-cors-changer/digfbfaphojjndkpccljibejjbppifbc?hl=en-US

[AndrewBastin]

Assigning the issue to myself as I intend to resolve it by introducing a proxy system.

Feel free to put down any questions or any further discussion here...

[liyasthomas]

Middleware implementation has out of the box support in Nuxt.

https://nuxtjs.org/api/pages-middleware
https://nuxtjs.org/examples/middleware
https://nuxtjs.org/guide/routing#middleware

[AndrewBastin]

Umm, I am working on this, but I have some personal stuff coming up, so I will be focusing on that for a while (a week or so).

I am unassigning myself from this meanwhile, feel free to tackle this issue if you want.

[philBrown]

Given the number of questions on StackOverflow that are some form of duplicate of Why does my JavaScript code get a “No 'Access-Control-Allow-Origin' header is present on the requested resource” error when Postman does not?, I don't see this as a bad thing.