simple get angular4错误:请求标头字段X-XSRF-TOKEN在预检响应中不被Access-Control-Allow-Headers允许

问题描述:

一个简单的get angular4错误:请求标头字段X-XSRF-TOKEN不被Access-预检响应中的Control-Allow-Headers。simple get angular4错误:请求标头字段X-XSRF-TOKEN在预检响应中不被Access-Control-Allow-Headers允许

url: string = 'https://api.elasticemail.com/mailer/status/log?format=json&[email protected]&api_key=my-key; 

private readData() { 
    this._http.get(this.url) 
    .subscribe(
    data => this.extractData(data), 
    err => this.handleError(err) 
); 
} 

private extractData(res: Response) { 
    console.log("generate teste") 
    let body = res.json(); 
    console.log(body); 
    return body.data || {}; 
} 

如何解决这个问题?

+0

这是一个CORS问题。您正在调用与JavaScript所服务的域不同的域。所以它不是真正的Angular,但CORS和同源策略:https://en.wikipedia.org/wiki/Same-origin_policy CORS是跨源资源共享 –

+0

但我没有响应控制请求链接,如何我可以配置角度? 感谢收听 –

+0

此问题已经在这里有一个答案:https://*.com/questions/38589944/angular2-x-xsrf-token-is-not-allowed-by-access-control-allow-headers/43021066 #43021066 –

在Windows中,在运行窗口中粘贴此命令

chrome.exe --user-data-dir="C:/Chrome dev session" --disable-web-security 
this will open a new chrome browser which allow access to no 'access-control-allow-origin' header request. 

参考

  1. Why does my JavaScript get a "No 'Access-Control-Allow-Origin' header is present on the requested resource" error when Postman does not?