Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,464 questions
Azure APIM Developer Portal - Need help with handling CORS errors
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 85%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHP%3C/text%3E%3C/svg%3E)
Hari Prathipati
0
Reputation points
Hello,
I'm trying to test an API operation, but when I provide an invalid subscription key, the error message returned is related to CORS rather than an invalid subscription error message. However, I receive a success response when using a valid subscription key. Can someone please help me figure out how to properly handle these CORS errors so I can receive the correct response message?
Thanks in advance.
Regards, Hari
Azure API Management
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,019 questions
{count} votes
-
Hari Prathipati 0 Reputation points
2024-04-29T05:37:29.55+00:00 Hi Team,
Can someone please help me with the above ask.
Thanks in advance for quick response.
Regards, Hari
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 59%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
JananiRamesh-MSFT 29,276 Reputation points2024-04-30T07:02:42.9733333+00:00 @Hari Prathipati Thanks for reaching out. Could you please share your effective policy to investigate further?
-
Hari Prathipati 0 Reputation points
2024-04-30T07:50:45.36+00:00 please find the attached effective policy for your investigation.
FYI... Also have a Product associated with the API and at Product level as well the CORS policies were enabled. please check below Policies (Product level)
<policies> <inbound> <base /> <cors allow-credentials="true"> <allowed-origins> <origin>apiportal.com</origin> <origin>apiportal.PrimaryRegion.com</origin> </allowed-origins> <allowed-methods preflight-result-max-age="300"> <method>*</method> </allowed-methods> <allowed-headers> <header>*</header> </allowed-headers> <expose-headers> <header>*</header> </expose-headers> </cors> <set-header name="Subscription-Key" exists-action="delete" /> </inbound> <backend> <base /> </backend> <outbound> <base /> </outbound> <on-error> <base /> </on-error> </policies>Thanks in advance for quick response.
Regards, Hari
-
JananiRamesh-MSFT 29,276 Reputation points
2024-05-01T05:15:36.15+00:00 @Hari Prathipati Thanks for sharing the details, I don't see any issues with policy this would need in-depth troubleshooting I will suggest you to open the support ticket with us to assist you further. If you don't have the support plan then please send an email with subject line “Attn:Janani” to AzCommunity[at]Microsoft[dot]com referencing this thread along with the subscription ID so I can enable one time free support request on your subscription.
Sign in to comment
Sign in to answer