Below code is not working and returning 403 forbidden but the same url giving the correct response postman tool.
fetch('https://example.com/', {
method: 'POST',
headers: {'Content-Type': 'application/json', },
body:JSON.stringify(sampledata),
}).then(result => console.log('success====:', result))
.catch(error => console.log('error============:', error));
You need to add credentials: 'include' to your request.
fetch('https://example.com/', {
credentials: 'include',
method: 'POST',
headers: {'Content-Type': 'application/json', },
body: JSON.stringify(sampledata),
}).then(result => console.log('success====:', result))
.catch(error => console.log('error============:', error));
Please read this article Cross-Origin Resource Sharing , And change your API "Content-Type" to "text/plain". It will work (both fetch and axios)
fetch('https://example.com/', {
method: 'POST',
headers: {'Content-Type': 'text/plain', },
body:JSON.stringify(sampledata),
}).then(result => console.log('success====:', result))
.catch(error => console.log('error============:', error));
Probably CORS problem. Regular web pages can send and receive data from remote servers, but they're limited by the same origin policy. Extensions like postman aren't. You have to configure CORS on your backend.
This is because Postman doesn't need to abide by access-control-allow-origin headers. Browser vendors look for this header from host server. If the server contains ACCESS-CONTROL-ALLOW-ORIGIN: "*" and Access-Control-Allow-Methods: "GET, POST, PUT, DELETE, OPTIONS" this would then tell the browser that this resource has given permission to be accessed.
