Still missing CORS header

[dwicao]

Hi! I've used PokeAPI in my React.js pure client-side app [repo],
any API calls fail because it still missing CORS header,
although I've been set a user agent header { 'User-Agent': 'cheese' },
any workarounds?

SOLVED: cloudflare messes up the request.

1. Try add a slash to the end of the request - http://pokeapi.co/api/v2/

2. Try change API endpoints from http://pokeapi.co/api/v2 to http://pokeapi.salestock.net/api/v2
   It works! 🎉 🎉 🎉

3. Or as a temporary remedy, you can try cors.now.sh
   https://cors.now.sh/https://pokeapi.co/api/v2/

[Naramsim]

The app seems to work, on my side.

[dwicao]

I don't know why, but now it seems worked 🎉

[dwicao]

still don't work 😭

[antilama]

My app also stopped working few days ago due to similar error.

[Mjain10]

I have the same problem, can't seem to find a fix to it

[Naramsim]

Probably is something related to our CDN provider, CloudFlare.

Try to make direct HTTPS calls

Also, try to remove any User Agent Header you have

[antilama]

Calling API through HTTPS solved the issue for me, although I don't really understand how.

[Naramsim]

@antilama Probably our Cloudflare when redirecting http to https (somebody probably enabled HSTS) strips away our 'Access-Control-Allow-Origin' header.

If this solution work for @Mjain10 we can close

[Mjain10]

I'm getting a 504 error instead when using https

[arfianadam]

I still get this exact problem. Switched to https and still na da. Any fix?

[arfianadam]

Https request also requires Cloudflare verification which is not usable on client-side API calls.

[Naramsim]

So Cloudflare messes up the request. If anybody could investigate...