I am currently encountering an issue while attempting to retrieve data using Angular from my Symfony API, which returns JSON:
"Cross-Origin Request Blocked: The Same Origin Policy prohibits reading the remote resource at http://localhost:8000/customers. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing)."
Here is a screenshot of the complete result:
https://i.stack.imgur.com/qhjlh.png
I know this question has been asked multiple times before but I have not been able to find a solution that works.
When I attempt to fetch the $session in the api controller, it fails and I do not receive the necessary data. Here is my api controller:
(API Controller code here)So when I call "localhost:8000/index", a CAS server authentication bundle also calls an https URL for user authentication on the company's intranet. Upon successful authentication, they can then retrieve results from localhost:8000/index
And here is my Angular controller:
(Angular Controller code here)Nelmio Cors Bundle Configuration:
(Nelmio Cors configuration code here)CAS Bundle Configuration:
(CAS Bundle configuration code here)(security.yml) :
(Security configuration code here)I suspect that my API does not set the same headers as Angular, causing the browser to block the request. Is there a way to directly set header options from the Angular controller to match those of the api?