Can I use authorization header with CORS in JIRA REST API

[Jeideep Ramamoorthy Renganathan]

Hi,

I am using JIRA version v6.1.2. I am trying to access JIRA Rest api via CORS after enabling my domain via the whitelist page and am getting the below error:-

XMLHttpRequest cannot load [URL]. Request header field Authorization is not allowed by Access-Control-Allow-Headers.

Does it mean I cannot access the API with Authorization header? Please advise. Thanks.

Jeideep.

[Trevor Reed]

Struggling with the same issue. Unless I'm missing something, it seems that the JIRA REST API is essentially unusable when doing CORS requests.

[Sean_Wilson]

I'm having the exact same issue using JIRA 6.4.10. I've tried this which might help you. 

Unfortunately in our case it just ended up duplicating the "Access-Control-Allow-Credentials" and "Access-Control-Allow-Origin" headers. Still no luck with getting the "Authorization" header added.