I am using WordPress Contact Form 7 plugin to send message from my mobile application. Of course testing with PostMan worked with no issues but as soon as I tried to post to the endpoint from my mobile application I am getting the following error:
Access to XMLHttpRequest at 'mydomain.com/wp-json/contact-form-7/v1/contact-forms/18/feedback' from origin 'null' has been blocked by CORS policy: Request header field access-control-allow-origin is not allowed by Access-Control-Allow-Headers in preflight response.
1: What does the following part of the error mean?
in preflight response
2: What can I update on my WordPress install to allow the above process to be successful? I have access to the site files and I am able to add a new plugin if that helps.
Below is a screenshot of the headers and their values when I try to hit the endpoint from my local development machine:
GENERAL Request URL: mywebsite.com/wp-json/contact-form-7/v1/contact-forms/622/feedback Request Method: OPTIONS Status Code: 200 OK Remote Address: 126.96.36.199:80 Referrer Policy: no-referrer-when-downgrade RESPONSE HEADERS Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Methods: OPTIONS, GET, POST, PUT, PATCH, DELETE Access-Control-Allow-Origin: null Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages Allow: POST Connection: keep-alive Content-Encoding: gzip Content-Type: application/json; charset=UTF-8 Date: Mon, 06 Jan 2020 03:39:34 GMT Link: <mywebsite.com/wp-json/>; rel="https://api.w.org/" Server: nginx/1.17.5 Transfer-Encoding: chunked Vary: Accept-Encoding Vary: Origin X-Content-Type-Options: nosniff X-Robots-Tag: noindex REQUEST HEADERS Accept: */* Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Access-Control-Request-Headers: access-control-allow-origin Access-Control-Request-Method: POST Connection: keep-alive Host: mywebsite.com Origin: null User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Mobile Safari/537.36