Cors Domain Policy

Shopify Apps

Topic summary

A developer is encountering a CORS (Cross-Origin Resource Sharing) policy error when attempting to fetch data from Shopify’s Admin API.

Technical Details:

Current Status:
The issue remains unresolved with no responses or solutions provided yet. The developer needs to either configure proper CORS headers on the server side or adjust their request approach to work within Shopify’s API access constraints.

Summarized with AI on November 4. AI used: claude-sonnet-4-5-20250929.
1

Access to fetch at ‘https://xxxxxxx.myshopify.com/admin/api/2024-10/locations.json’ (redirected from ‘https://yyyyyy.yy/admin/api/2024-10/locations.json’) from origin ‘https://yyyyyy.yy’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. If an opaque response serves your needs, set the request’s mode to ‘no-cors’ to fetch the resource with CORS disabled.

need to resolve