Confluence Rest api cors error.

[saivenkat thatikonda]

even after white listing the domain from which I am sending a request, Confluence rest api is still giving the CORS error in the browser. Can anyone please help me with this? 

Did anyone come across this issue before?

[Rafael Pinto Sperafico]

Hi @saivenkat thatikonda ,

Please, make sure you are following https://developer.atlassian.com/cloud/confluence/rest/#using documentation in which comments on the need of X-Atlassian-Token: no-check in the header.

Special headers:

X-Atlassian-Token: no-check request header must be specified for methods that are protected from Cross Site Request Forgery (XSRF/CSRF) attacks. This is stated in the method description, if required. For more information, see this KB article.

Kind regards,
Rafael

[saivenkat thatikonda]

Thank you for the reply. 

This special header is for request sent through server side programming languages or command-line. but i am trying to send a request from a third party website through java-script code. please let me know if there is a way to achieve this without the CORS error.

Thank you.

[Rahul Jain]

@saivenkat thatikonda How did you resolve this issue?

[Steve Suranie]

Be aware, per the article, X-Atlassian-Token: no-check is only for command line tools. You cannot pass this header with Javascript.