# CORS Policy - Deny my request

**URL:** <https://devforum.zoom.us/t/cors-policy-deny-my-request/4523>\
**Category:** API and Webhooks\
**Created:** [June 5, 2019, 3:07pm UTC](https://devforum.zoom.us/t/cors-policy-deny-my-request/4523 "2019-06-05T15:07:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![david.corrales](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/david.corrales/32/815_2.png) [@david.corrales](https://devforum.zoom.us/u/david.corrales)\
**Post date:** [June 5, 2019, 3:07pm UTC](https://devforum.zoom.us/t/cors-policy-deny-my-request/4523/1 "2019-06-05T15:07:42Z")

</div>

Good Evening,

I have a problem with my angular JS application. I´m developing a web application and I have a problem whe I try to call API REST. I have done several test with Oauth2, and I can´t get the token authorization…allway I get CORS policy deny.

Now I´m trying to send a simple list user request: [https://api.zoom.us/v2/users?status=active&page\_size=30&page\_number=1](https://api.zoom.us/v2/users?status=active&page_size=30&page_number=1)

I´m using Authorization JWT Token generated from your [marketplace.zoom.us](http://marketplace.zoom.us):

- Headers:  
.set(‘Authorization’, "Bearer " + jwt)  
.set(‘Content-Type’, ‘application/json’)  
.set(‘Access-Control-Request-Method’, ‘GET’)  
.set(‘Access-Control-Allow-Methods’, ‘GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH’)  
.set(‘Access-Control-Request-Headers’, ‘access-control-allow-methods,authorization,content-type’);

I´m getting this error: “Access to XMLHttpRequest at ‘[https://api.zoom.us/v2/users?status=active&page\_size=30&page\_number=1](https://api.zoom.us/v2/users?status=active&page_size=30&page_number=1)’ from origin ‘[https://localhost:4200](https://localhost:4200)’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.”

If I install and enable Chrome Extension: Allow CORS: Access-Control-Allow-origin, I get this error “Access to XMLHttpRequest at ‘[https://api.zoom.us/v2/users?status=active&page\_size=30&page\_number=1](https://api.zoom.us/v2/users?status=active&page_size=30&page_number=1)’ from origin ‘[https://localhost:4200](https://localhost:4200)’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: It does not have HTTP ok status”.

I need to use API Rest from my development environment with AngularJS. I don´t know if any can help me with this problem, because I don´t know how can avoid this CORS Policy problem. How can I use the API from Angular JS Project?

Maybe the problem is with “Origin” localhost, but I have tried a public domain with a proxy inverse and always get CORS policy deny. ☹

Or maybe is that I can´t use API from Client Server…just from APP Server ¿?

Thanks so much.  
Best Regards.

---

<div class="post-metadata">

**Author:** ![michael\_p.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael_p.zoom/32/18105_2.png) [@michael\_p.zoom](https://devforum.zoom.us/u/michael_p.zoom)\
**Post date:** [June 5, 2019, 4:02pm UTC](https://devforum.zoom.us/t/cors-policy-deny-my-request/4523/2 "2019-06-05T16:02:25Z")

</div>

Hi David,

Our REST API can only be used via server side and not client side, hence the errors that you are receiving.

Thanks

---

<div class="post-metadata">

**Author:** ![david.corrales](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/david.corrales/32/815_2.png) [@david.corrales](https://devforum.zoom.us/u/david.corrales)\
**Post date:** [June 5, 2019, 4:15pm UTC](https://devforum.zoom.us/t/cors-policy-deny-my-request/4523/3 "2019-06-05T16:15:55Z")

</div>

Ok. Thanks so much!  
Best regars.