API CORS error

[Nicole Scoggins]

Hi I am just starting to work with APIs.  I am having issues with the CORS error below [edited websites]. 

Access to XMLHttpRequest at 'https://api.test.xxx.com/access' from origin 'https://yyy.zzz.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

The company we are working with does not want to add the Access-Control-Allow-Origin header.  What is the best way to proceed in ColdFusion? Any suggestions are greatly appreciated.

Thanks

Nicole

[Dave Watts]

If you're ok with fetching the data with ColdFusion itself, just use CFHTTP to do so, then process whatever needs to be processed, then output it to the browser. CORS only affects cross-origin requests made by browsers.

Dave Watts, Eidolon LLC

[Nicole Scoggins]

Thank you

I got it to work on CF18 but not on CF11 with cfhttp.

[Charlie Arehart]

Nicole, since you're using an https URL for your cfhttp call, your issue with CF11 will likely be just down to having an outdated JVM (that CF is using). That's easily solved. For more, see my post here: https://coldfusion.adobe.com/2019/06/error-calling-cf-via-https-solved-updating-jvm/

Let us know if that gets you going there.