CORS error when using the API

Catrina Roallos

Hey friends, does anyone know how to get around this CORS error?

```
Access to XMLHttpRequest at 'https://secure2.convio.net/scai/site/CRDonationAPI' from origin 'https://www.mwdagency.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
```

I've already whitelisted the domain, "*.mwdagency.com" in Luminate Online.


I've got the test code running on both of these servers:

[removed]


(the whitelist should work with either of these...)


I'm using Noah Cooper's LuminateExtend JS library:
https://github.com/noahcooper/luminateExtend


Please let me know what you think, thanks! -catrina

Noah Cooper

The problem is that you're using an incorrect domain. The secure path for this site is actually https://secure.thesca.org/site/CRDonationAPI. You should set the securePath to https://secure.thesca.org/site/.

Catrina Roallos

Eagle eye! Noah Cooper‍, that totally did the trick. (And thank you for creating LuminateExtend!) -c