Skip to main content
Question

Cors origin not whitelisted

  • May 22, 2025
  • 8 replies
  • 152 views

Forum|alt.badge.img

Hi Team,

 

I'm getting the following error when trying to create a new file could you please help me out?

 

{
"type": "error",
"status": 403,
"code": "cors_origin_not_whitelisted",
"context_info": {
"origin": "chrome-extension://fhbjgbiflinjbdggehcddcbncdddomop"
},
"help_url": "http://developers.box.com/docs/#errors",
"message": "Access denied - Did you forget to whitelist your origin in the CORS config of your app?",
"request_id": "x3wXXXXXXXXX"
}

8 replies

Forum|alt.badge.img

Hi  . I assume you are trying to upload a file from a website. In that case you need to explicitly allow the domain this site runs on to make API calls. We have more written up on that here: https://developer.box.com/reference#cors


Forum|alt.badge.img

Thanks  for the quick response,

 

we are trying from the postman collection, trying to upload a sample file and getting this error

 

i'm getting this error for creation of folder, getting the file metadata etc., can you please help us?


Forum|alt.badge.img

Is this the Postman desktop app or the chrome extension?


Forum|alt.badge.img

chrome extension


Forum|alt.badge.img

 I don't think we support the chrome extension I think, sadly, as we don't know what the URL of the extension is. If you download the full app, this error would not appear.


Forum|alt.badge.img

Good morning,

I would say is as simple as copying the origin as it is in the cors allowance in the developers console.

 

So, copy the complete origin including the protocol (chrome-extension)

 

I use Restlet Chrome plugin and is what I do. It works fine 😉

Thanks


Forum|alt.badge.img

facing below error:

 

when trying to implement content explorer:

https://developer.box.com/guides/embed/ui-elements/explorer/

var contentExplorer = new Box.ContentExplorer();//Show the content explorer

contentExplorer.show(configData.FOLDER_ID, configData.ACCESS_TOKEN, { container: ".container"});

ERROR in browser console: explorer.js:173

{type: 'error', status: 403, code: 'cors_origin_not_whitelisted', context_info: {…}, help_url: 'http://developers.box.com/docs/#errors', …}
(


Forum|alt.badge.img

Hi Team,

 

I am trying to Integrate the box content explorer following below snippet:

https://codepen.io/box-platform/pen/wdWWdN

in my custom application facing error : 

type: 'error', status: 403, code: 'cors_origin_not_whitelisted', context_info: {…}, help_url: 'http://developers.box.com/docs/#errors', …}