CORS problem when calling tyk-portal/api/

[Olu]

Hello @David_Slechticky and welcome to the community

What you are looking for has been explained in full detail on the topic below

Enable CORS for Tyk Gateway API

Hi, Unfortunately the management APIs in the gateway are not setup to provide suitable CORS responses, so will not provide the relevant headers for preflight or similar checks. Can I ask what you are attempting to achieve, as it seems to imply you have the gateway secret stored in a single page app or similar, which is not the best approach for security, as the gateway secret being available on the client end, means users could access any and all admin apis on the gateway. I’m wondering if the…