# Access-Control-Allow-Origin on SSO url by external ID

**URL:** https://meta.discourse.org/t/access-control-allow-origin-on-sso-url-by-external-id/55915
**Category:** Support
**Created:** [1월 17, 2017, 4:57오후 UTC](https://meta.discourse.org/t/access-control-allow-origin-on-sso-url-by-external-id/55915 "2017-01-17T16:57:41Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Rojoss](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rojoss/32/121293_2.png) [@Rojoss](https://meta.discourse.org/u/Rojoss)
#### Post date: [1월 17, 2017, 4:57오후 UTC](https://meta.discourse.org/t/access-control-allow-origin-on-sso-url-by-external-id/55915/1 "2017-01-17T16:57:41Z")

</div>

In our Unity WebGL game we’d like to get data from the forum.  
When I do a request to the forum from the game I get the following error.

`XMLHttpRequest cannot load http://forum.curvefever.io/users/by-external/1.json. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://curvefever.io' is therefore not allowed access.`

I don’t really know much about CORS so I’d like to know if there’s something I can do to make this work.  
I’ve looked it up a little but I mostly found that the location that sends the request has to add a header and I’m not really in control of that.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [1월 17, 2017, 5:00오후 UTC](https://meta.discourse.org/t/access-control-allow-origin-on-sso-url-by-external-id/55915/2 "2017-01-17T17:00:23Z")

</div>

[https://meta.discourse.org/t/advanced-setup-and-administration/15929?u=falco](https://meta.discourse.org/t/advanced-setup-and-administration/15929)

---

<div class="post-metadata">

### Author: ![Rojoss](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rojoss/32/121293_2.png) [@Rojoss](https://meta.discourse.org/u/Rojoss)
#### Post date: [1월 17, 2017, 5:18오후 UTC](https://meta.discourse.org/t/access-control-allow-origin-on-sso-url-by-external-id/55915/3 "2017-01-17T17:18:57Z")

</div>

My bad didn’t read that.  
Thanks for the reply.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [1월 17, 2017, 6:59오후 UTC](https://meta.discourse.org/t/access-control-allow-origin-on-sso-url-by-external-id/55915/4 "2017-01-17T18:59:31Z")

</div>