Announcements
From 28th September 2026, Community private messages will no longer be available. If you have any private messages you'd like to keep, please save or copy them using these steps before this date. Thank you.

Help Wizard

Step 1

NEXT STEP

Access to XMLHttpRequest at 'https://api.spotify.com/v1/me' from origin

Access to XMLHttpRequest at 'https://api.spotify.com/v1/me' from origin

My Question or Issue:

 

Im a fairly new developer trying to setup spotify integration for a web app I'm building. So far I've been able to get the access_token stored as a cookie, but when the frontend loads, I get the error:
"Access to XMLHttpRequest at 'https://api.spotify.com/v1/me' from origin 'http://localhost:3000' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute."

 

I believe I have my cors setup properly in the backend
"

origins = [
]

app.add_middleware(
    CORSMiddleware,
    allow_origins=origins,
    allow_credentials=True,
    allow_methods=["GET", "POST", "PUT", "DELETE", "PATCH", "OPTIONS"],
    allow_headers=[
        "Authorization",
        "Content-Type",
        "Access-Control-Allow-Headers",
        "X-Requested-With",
        "X-Custom-Header",
        ],
    max_age=3600,
)"
 
However I am a new developer and could be completely wrong. I am using docker containers for each the frontend and the backend.  I am including withCredentials:true in my frontend when trying to make requests. Sorry if this is a dumb question, I'm just stuck right now.

 

Reply
0 Replies

Suggested posts

Let's introduce ourselves!

Hey there you,   Yeah, you! 😁   Welcome - we're glad you joined the Spotify Community!   While you here, let's have a fun game and get…

ModeratorStaff / Moderator/ 5 years ago  in Social & Random