# Cabeçalho de solicitação User-Api-Key não permitido por Access-Control-Allow-Headers **URL:** \ **Category:** Bug\ **Created:** [18 Julho , 2018 17:40 UTC](https://meta.discourse.org/t/request-header-field-user-api-key-is-not-allowed-by-access-control-allow-headers/92662 "2018-07-18T17:40:31Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![davide.porrovecchio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/davide.porrovecchio/32/119681_2.png) [@davide.porrovecchio](https://meta.discourse.org/u/davide.porrovecchio)\ **Post date:** [18 Julho , 2018 17:40 UTC](https://meta.discourse.org/t/request-header-field-user-api-key-is-not-allowed-by-access-control-allow-headers/92662/1 "2018-07-18T17:40:31Z")
I get this error message when trying to use User API key as described in [User API keys specification](https://meta.discourse.org/t/user-api-keys-specification/48536). I think `User-Api-Key` and `User-Api-Client-Id` should be added to `Access-Control-Allow-Headers` header as defined in [discourse/config/initializers/004-message\_bus.rb at main · discourse/discourse · GitHub](https://github.com/discourse/discourse/blob/master/config/initializers/004-message_bus.rb#L18). Here is a [PR](https://github.com/discourse/discourse/pull/6107) that fixes this little bug. --- _[View the full topic](https://meta.discourse.org/t/request-header-field-user-api-key-is-not-allowed-by-access-control-allow-headers/92662)._