CODEWITHSUNDEEP
google-chromegoogle-chrome-extensiongoogle-chrome-app
user3444365
user3444365

Reputation: 65

Cannot run xmlhttprequest in Chrome App : provisional headers & No 'Access-Control-Allow-Origin'

I am building a chrome app sending a Get HTTPRequest to an external API:
I get the answer:

XMLHttpRequest cannot load http://developer.echonest.com/api/v4/artist/profile?api_key=FILDTEOIK2HBORODV&name=weezer. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'chrome-extension://ihdfphmemcdeadpnjkhpihmcoeiklphe' is therefore not allowed access.

It seems Chrome is blocking my request, I even tried to load directly the script in an HTML page and it does not work (same message but with origin "null") (oh and it did not allow me to cheat by changing the Origin in the Header).
I also get the famous "Caution : Provisional Headers are shown" in the console, which makes me think Chrome is blocking my request, I looked up on other Stack Overflow Questions but apart running chrome://net-internals and looking for stuff I haven't the first clue about I cannot find any good answers (I did run chrome://net-internals but really can't make any sense out of it).

Here is the request :

function update_stations() {
    var xhr = new XMLHttpRequest();
    xhr.open("Get","http://developer.echonest.com/api/v4/artist/profile?api_key=FILDTEOIK2HBORODV&name=weezer", true);
    xhr.responseType = "json";
    xhr.onreadystatechange = function() {
        console.log("Essai");
        console.log(xhr.readyState);
        console.log(xhr);
        document.getElementById("resp").innerText = xhr;
    }
    xhr.send()
}

Any thoughts (would be highly appreciated)?

Upvotes: 0

Views: 828

Answers (1)

Vincent Scheib
Vincent Scheib

Reputation: 18610

Cross-Origin XMLHttpRequest chrome developer documentation explains that the host must be listed in the permissions of the manifest file.

I've taken the XHR code from above and included it in the hello world sample. It works after adding the following to the manifest.json.

  "permissions": [
    "http://*.echonest.com/"
  ]

Upvotes: 1

Related Questions