[Hidden-tech] Problems with AWS API and CORS

[Rich@tnr]

I've seen this problem when trying to get images using javascript, the 
answer tends to be add the option no-cors.
I've done it using fetch - don't see that xhttp has the option, like this:|

options ={||
     method:'GET',||mode:'no-cors'||};||

fetch(url,options).then(response =>response.blob())|
||

|...... |

However since you are saying it's a server you control at AWS then more 
specific detail is needed to be more help.
Esp since there are many AWS services, which one is important.

Here is a more detailed explanation of cors itself, which I'll guess 
you've already seen:
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

Rich

On 6/8/2020 10:34 AM, Alan Frank via Hidden-discuss wrote:
> Hi,
>
> I am a newbie with AWS (learning it via acloudguru.com, where I posted 
> my question a few days ago and have gotten no responses) and am 
> running into problems with CORS; specifically, I am getting an error 
> when my JS code attempts to call my API: "Access to XMLHttpRequest at 
> 'https://<redacted>.execute-api.us-east-1.amazonaws.com/default' from 
> origin 'https://s3.amazonaws.com' has been blocked by CORS policy: No 
> 'Access-Control-Allow-Origin' header is present on the requested 
> resource."
>
> There is a huge amount of information out there, but most of it 
> appears to be either irrelevant or over my head.  I did figure out 
> that I might be able to look at an access log to see what is going 
> on.  I found the instructions on setting this up 
> (https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html#set-up-access-logging-using-console), 
> but they tell me to "Sign in to the API Gateway console, select an 
> API, choose Settings from the primary navigation panel, and enter an 
> ARN in CloudWatch log role ARN."  However, this field does not seem to 
> exist.  I have provided this feedback to AWS, but am not expecting a 
> timely response.
>
> I'd be grateful for any help.
>
> --Alan
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech Discussion 
> list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members
>
-- 
Rich Roth
CEO TnR Global

Bio and personal blog: http://rizbang.com
Building the really big sites:      http://www.tnrglobal.com
Small/Soho business in the PV:        http://www.hidden-tech.net
Places to meet for business:        http://www.meetmewhere.com
And for relaxation:        http://www.welovemuseums.com
      http://www.artonmytv.com/
Helping move the world:             http://www.earththrives.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20200608/f83950a9/attachment.html>