"No 'Access-Control-Allow-Origin' header is present" cakephp

Question

Good morning, everyone

I’m making an application with angular and cakephp. I am trying to make a request for the backend and the following message appears on the console:

Xmlhttprequest cannot load http://localhost:8765/api/v1/users/client.json? client_id=cliente&client_secret=secret. No 'Access-Control-Allow-Origin' header is present on the requested Resource. Origin 'http://localhost:8080' is therefore not allowed access.

my controller

.controller('loginCtrl', ['$scope', '$stateParams', '$http', '$location', function ($scope, $stateParams, $http, $location) {

$scope.fazerLogin = function(usuario){
    //console.log(usuario);
    //http://localhost:8765/api/v1/users/client.json?client_id=cliente&client_secret=segredo"
    var url = "";
    var cid = "cliente";
    var cs = "segredo";
    $http.post("http://localhost:8765/api/v1/users/client.json?client_id="+cid+"&client_secret="+cs).success(function(data){
        console.log(data);
    });

}


}])

my php

<?php
public function beforeFilter()
{

   parent::beforeFilter();
           $this->response->header('Access-Control-Allow-Origin','*');
           $this->response->header('Access-Control-Allow-Methods','*');
           $this->response->header('Access-Control-Allow-Headers','X-Requested-With');
           $this->response->header('Access-Control-Allow-Headers','Content-Type, x-xsrf-token');
           $this->response->header('Access-Control-Max-Age','172800');
}
?>

Where I have to make the adjustment in my php?

Answer 1

Hello!
The server does not allow making requests to another domain other than the current one. You must give permission to do so by adding the following header:

<?php
    header("Access-Control-Allow-Origin: *");
    ...
    ...
?>

Reference for more details: https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS

Answer 2

In the endpoint of your service add:

$this->response->header('Access-Control-Allow-Origin', '*');