Forum Discussion
VChupaev
4 years agoNew Contributor II
Hi, @mbowen,
yes the request sends the Authorization header, since it is a call to the SL task, which requires a token, so looks like I cannot avoid a preflight call.
I tried a host without asterisk, actually I have both records at the same time - with full domain and with wildcard.
Actually I expected that after setting the Allowlist I will have Access-Control-Allow-Origin header in response.
I want to understand where is a problem, I can think about these reasons:
- The SL profile is not configured to work with CORS and requires assistance from your side.
- The allowlist has incorrect values.
Thank you.