# Acess-Control-Allow-Headers CORS Error with API after updating discourse

**URL:** <https://meta.discourse.org/t/acess-control-allow-headers-cors-error-with-api-after-updating-discourse/147716>\
**Category:** Product Support\
**Created:** [April 12, 2020, 4:51pm UTC](https://meta.discourse.org/t/acess-control-allow-headers-cors-error-with-api-after-updating-discourse/147716 "2020-04-12T16:51:16Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![RGJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rgj/32/523185_2.png) [@RGJ](https://meta.discourse.org/u/RGJ)\
**Post date:** [April 12, 2020, 6:09pm UTC](https://meta.discourse.org/t/acess-control-allow-headers-cors-error-with-api-after-updating-discourse/147716/6 "2020-04-12T18:09:43Z")

</div>

Let me repeat what I said:

> [@RGJ](#):
>
> Any Ajax HTTP requests to Discourse should be leveraging an existing session

That means: no authentication headers. At all.

---

_[View the full topic](https://meta.discourse.org/t/acess-control-allow-headers-cors-error-with-api-after-updating-discourse/147716)._