AngularJS: No "Access-Control-Allow-Origin" header is present on the requested resource

Question

I'm writting my webApp and I'm using AngularJS. In this app I have created a file called script.js and I report this code:

var modulo = angular.module('progetto', ['ngRoute']);

    // configure our routes
    modulo.config(function ($routeProvider, $httpProvider) {
        $routeProvider

            // route for the home page
            .when('/', {
                templateUrl: 'listaFilm.html',
                controller: 'listaController'
            })

            // route for the description page
            .when('/:phoneName', {
                templateUrl: 'description.html',
                controller: 'descriptionController'
            });


            $httpProvider.defaults.headers.common['Access-Control-Allow-Origin'] = '*';

    });


    modulo.controller('listaController', function ($scope, $http) {
        $http.get('https://api.getevents.co/event?&lat=41.904196&lng=12.465974').success(function (data) {
            $scope.names = data;
            }).
            error(function (data, status) {
                $scope.names = "Request failed";
            });
    });

With this code I call API following RESTful principles. When I run the code i have this problem:

XMLHttpRequest cannot load https://api.getevents.co No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8383' is therefore not allowed access.

Reading on the web I understood that I have a problem called CORS...I have tried several solutions proposed but I didn't resolve the problem.
How can I fix the problem?
What's the code that I must add for fix it?

`https://api.getevents.co` needs to serve CORS headers in its responses. Do you control (or can you otherwise configure) the server at `https://api.getevents.co`? The server needs to change its behavior. — apsillers, Apr 09 '15 at 19:20
not all API's are accessible by ajax if they are not either CORS enabled or jsonp enabled. Check the API docs or use a proxy — charlietfl, Apr 09 '15 at 19:24
I controll and this is the respose: Our API supports CORS (Cross Origin Resource Sharing), which means that it can be called straight from the browser using JavaScript, or more traditionally from the server using the back-end language of your choice. — Alessandro, Apr 09 '15 at 19:48
This answer maybe useful: https://stackoverflow.com/a/58064366/7059557 — AmirReza-Farahlagha, Sep 23 '19 at 14:13

score 65 · Answer 1 · edited May 23 '17 at 12:03

65

This is a server side issue. You don't need to add any headers in angular for cors. You need to add header on the server side:

Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *

First two answers here: How to enable CORS in AngularJs

edited May 23 '17 at 12:03

Community

1
1

answered Apr 09 '15 at 20:57

Kristjan Liiva

9,069
3
25
26

5

How and where i write this code in my code? – Alessandro Apr 10 '15 at 07:10
5

That will depend on your server technology, I found a w3 link that has quite a good selection: http://www.w3.org/wiki/CORS_Enabled – Kristjan Liiva Apr 10 '15 at 07:32
1

`Access-Control-Allow-Origin: *` is what fixed my issue. For the record I had built a Go microservice, `w.Header().Add("Access-Control-Allow-Origin", "*")` was the actual line that worked. – Sion May 16 '16 at 13:40
@Sion Cav you add your solution as an answer please? It would be nice to see how/where you did this. – Travis Heeter May 08 '17 at 23:54
1

For `Springboot` application, adding `@CrossOrigin` in the rest controller worked for me. – Arpit Aggarwal Nov 10 '19 at 12:53

score 32 · Answer 2 · edited Jul 08 '15 at 19:06

32

CORS is Cross Origin Resource Sharing, you get this error if you are trying to access from one domain to another domain.

Try using JSONP. In your case, JSONP should work fine because it only uses the GET method.

Try something like this:

var url = "https://api.getevents.co/event?&lat=41.904196&lng=12.465974";
$http({
    method: 'JSONP',
    url: url
}).
success(function(status) {
    //your code when success
}).
error(function(status) {
    //your code when fails
});

edited Jul 08 '15 at 19:06

Kabb5

3,760
2
33
55

answered Apr 09 '15 at 20:11

Ritt

3,181
3
22
51

Super. Thanks a lot! – Stan Sokolov Jan 20 '17 at 18:10
1

My pleasure..!!!! – Ritt Jan 21 '17 at 06:17
2

since these success and error methods are not chainable they were removed from angular. We should use `.then()` http://stackoverflow.com/questions/35329384/why-are-angular-http-success-error-methods-deprecated-removed-from-v1-6 – Junior Mayhé Apr 16 '17 at 18:42
1

then what about for post, put, and delete?? – Ananda G Dec 11 '17 at 11:45
1

JSONP only supports GET – Ritt Dec 11 '17 at 13:59
This things helps in the first place...! – Maddy Nov 28 '18 at 14:57

AngularJS: No "Access-Control-Allow-Origin" header is present on the requested resource

2 Answers2

Linked