# API CORS Headers Incorrect

**URL:** <https://meta.discourse.org/t/api-cors-headers-incorrect/135155>\
**Category:** Product Support\
**Created:** [December 5, 2019, 2:19pm UTC](https://meta.discourse.org/t/api-cors-headers-incorrect/135155 "2019-12-05T14:19:04Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![gezquinn](https://avatars.discourse-cdn.com/v4/letter/g/ce73a5/32.png) [@gezquinn](https://meta.discourse.org/u/gezquinn)\
**Post date:** [July 4, 2020, 10:01am UTC](https://meta.discourse.org/t/api-cors-headers-incorrect/135155/4 "2020-07-04T10:01:39Z")

</div>

@david I’m using SSO and want to log the user out of Discourse when they log out of the app. I’m currently using the ‘admin API’ to fetch the the user ID via `/users/by-external/${id}.json` but I’m getting CORS errors - I don’t want to enable the ‘user API’ for every user just for this logout process - what do you suggest?

---

_[View the full topic](https://meta.discourse.org/t/api-cors-headers-incorrect/135155)._