Yammer api CORS issue

Question

Hello,

I'm currently trying to use the Yammer api to create a widget within a website. I have successfully grabbed the code and used that to request the access token object. I'm able to view the object by just following the url, but if I attempt to grab any information from the object with a GET request I run into this CORS error.

GET https://api.yammer.com/oauth2/access\_token 403 (Forbidden)

XMLHttpRequest cannot load https://api.yammer.com/oauth2/access\_token No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://192.168.7.209:9443' is therefore not allowed access. The response had HTTP status code 403.

(I purposely excluded the parts of the url that held my client_id and secret_key)

I'm not able to install the CORS plugin that's running around or use the yammer js sdk. One thought I had was that I was messing up the redirect URI or the javascript origins. The url that my code is currently running in is

https://192.168.7.209:9443/censhare5/client/assetImage/13000

My redirect URI and the javascript origins is also set to this url. This seems like it could be wrong. Please let me know if you have any idea on what i could be doing wrong or any ideas that I could try.

Thanks

Answer 1

Hi Jesper,

Greetings...!!

You are basically getting the error because you are not a global admin/verified admin in Yammer. When you use Yammer enterprise integrated with Office 365, and access Yammer developer for running APIs, you are allowed to have access by generating a token. It is because you are using Yammer basic version, and the Yammer basic does not have admin rights and hence you will not be authorised for generating a token.

Please feel free to revert for any query regarding Yammer.

Thanks and Regards,

Sreejith,

Microsoft Yammer Support

Answer 2

I get the same error but only when I use the "POST" method.

What do you mean " code generation in Yammer API"

Answer 3

Hello Andrew,

I apologize for delay in response.

The token key in developer.yammer.com can be generated by login in as global admin or verified admin of the network that doesn't seems to be working for Yammer free basic network.

Regards,

Sushil Dhiwa.

Microsoft Yammer support team.

Answer 4

Hi Sushil,

Thank you for replying.

I am currently using the Yammer free basic network.

Thanks,

Andrew Lam

Answer 5

Hello Andrew,

Thank you for your post.

This error 403 (Forbidden) normally occurs if the code generation in Yammer API is not done by global admin of office 365 tenant.

Kindly let us know if you are using Yammer enterprise network associated with office 365 or Yammer free basic network.

Regards,

Sushil Dhiwa.

Microsoft Yammer support team.