Problem With CORS

[nestoram]

Hello, I'm trying to make a request to the API through javascript/ajax and I'm getting this error:

Access to XMLHttpRequest at 'https://api.loyverse.com/v1.0/items' from origin 'http://nesdevel.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: It does not have HTTP ok status.

What would I be missing?

Thanks!

[andres]

 Hello!

This is impossible for security reasons. You can use some kind of middleware software for this, for example, nginx as a proxypass server.

[lordie]

Hey, I hope I'm not bothering, but what security reasons? I'm learning cors and I assumed that a password protected api wouldn't need it