# CORS error accessing API from javascript application

**URL:** <https://meta.discourse.org/t/cors-error-accessing-api-from-javascript-application/128785>\
**Category:** Development\
**Created:** [September 17, 2019, 12:49pm UTC](https://meta.discourse.org/t/cors-error-accessing-api-from-javascript-application/128785 "2019-09-17T12:49:29Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![tdekoekkoek](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tdekoekkoek/32/132035_2.png) [@tdekoekkoek](https://meta.discourse.org/u/tdekoekkoek)\
**Post date:** [September 17, 2019, 1:29pm UTC](https://meta.discourse.org/t/cors-error-accessing-api-from-javascript-application/128785/9 "2019-09-17T13:29:14Z")

</div>

Frankly accessing APIs from client applications with CORS enabled is extremely common and standard. I can’t believe there is not a more secure way of doing this. An entire industry revolves around hosted APIs that are accessed from different domains. As for accessing with user api, I’ve seen how to create those, but am unclear about what the actual credentials are. I am always getting 403 permission denied when using that method.

---

_[View the full topic](https://meta.discourse.org/t/cors-error-accessing-api-from-javascript-application/128785)._