• Hi,

    I’m trying to do an ajax request from a separate app on a different subdomain to my main wordpress site

    How to I prevent the following error.

    has been blocked by CORS policy: Request header field authentication is not allowed by Access-Control-Allow-Headers in preflight response

    when i use other jwt plugins that use the Authorization header, I have no problem. It’s not liking the ‘authentication’ header

  • The topic ‘CORS authentication header’ is closed to new replies.