# CORS BLOCKED my app

**URL:** <https://devforum.zoom.us/t/cors-blocked-my-app/38218>\
**Category:** API and Webhooks\
**Created:** [December 11, 2020, 6:06pm UTC](https://devforum.zoom.us/t/cors-blocked-my-app/38218 "2020-12-11T18:06:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![credexecutivo](https://avatars.discourse-cdn.com/v4/letter/c/f6c823/32.png) [@credexecutivo](https://devforum.zoom.us/u/credexecutivo)\
**Post date:** [December 11, 2020, 6:06pm UTC](https://devforum.zoom.us/t/cors-blocked-my-app/38218/1 "2020-12-11T18:06:48Z")

</div>

**Description**  
I have an application for scheduling and created an api for when the user schedules a zoom room to be created for him, my website however is http  
**Error**  
Access to XMLHttpRequest at ‘[https://api.zoom.us/v2/users/ti@credexecutivo.com.br/meetings](https://api.zoom.us/v2/users/ti@credexecutivo.com.br/meetings)’ from origin ‘[http://192.168.1.203:8080](http://192.168.1.203:8080)’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
I used OAuth

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/d/7/d766e824a28ddf79da631f6acac7293540273637.png)

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [December 11, 2020, 10:12pm UTC](https://devforum.zoom.us/t/cors-blocked-my-app/38218/2 "2020-12-11T22:12:01Z")

</div>

Hey @credexecutivo,

Thank you for reaching out to the Zoom Developer Forum. It’s important to note that our APIs cannot be called from the frontend/client-side code. Instead, you should be making these calls from the back-end/server-side to avoid CORS errors.

I hope that helps! Let me know if you have any questions.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![credexecutivo](https://avatars.discourse-cdn.com/v4/letter/c/f6c823/32.png) [@credexecutivo](https://devforum.zoom.us/u/credexecutivo)\
**Post date:** [December 14, 2020, 12:40pm UTC](https://devforum.zoom.us/t/cors-blocked-my-app/38218/3 "2020-12-14T12:40:33Z")

</div>

Can I do it in classic asp?

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [December 15, 2020, 7:15pm UTC](https://devforum.zoom.us/t/cors-blocked-my-app/38218/4 "2020-12-15T19:15:07Z")

</div>

Hey @credexecutivo,

Thank you for your question. Yes, as long as the code isn’t being called from browser client code such as JavaScript.

I hope that helps!

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [January 15, 2021, 5:15am UTC](https://devforum.zoom.us/t/cors-blocked-my-app/38218/5 "2021-01-15T05:15:12Z")

</div>

Closed on January 15, 2021, 5:15am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.