topic CORS issue in APIs & Integrations

CORS issue

dannymurong — Thu, 28 Nov 2019 02:42:30 GMT

Hi,

Our client is exploring to retrieve a Contact record via a custom form, and allow their ground staff to update a property of the record and submit back to HubSpot.

We are aware that in order to invoke HubSpot APIs, we need to use server-side languages. I am trying to find a workaround for the above scenario by "hosting" the custom form on a Landing Page, in hopes of using JS AJAX to retrieve a contact record, update a property and submit back to HubSpot.

With the above mentioned use case, is there any other workaround that you can share?

Re: CORS issue

sharonlicari — Mon, 09 Dec 2019 10:23:56 GMT

Hey @dannymurong

I apologize for the delay in getting back to you. I am wondering if you were able to resolve this or if you still need assistance on this matter?

Thank you

Sharon

Re: CORS issue

dannymurong — Mon, 09 Dec 2019 10:31:19 GMT

hey @sharonlicari ,

Yes I will still need assistance on this matter.

Appreciate your advice.

Thanks,

Danny

Re: CORS issue

Willson — Mon, 09 Dec 2019 11:25:13 GMT

Hi @dannymurong

For the most part, the HubSpot APIs do not support support cross-origin (CORS) AJAX requests. Making the request client-side using JavaScript would expose any authentication you're using for the request.

In order to use JavaScript/AJAX, you would need to make the request (excluding any authentication) to an external server that could then add the needed authentication and make requests to HubSpot's APIs server-side.

The exceptions to this rule are:

The Submit form data (AJAX) endpoint, which accepts CORS AJAX form submissions.
Most GET requests for published HubDB tables. See the HubDB API Overview for more details.

I hope this helps clarify your next steps here!

Re: CORS issue

Voyager2 — Fri, 17 Jan 2020 16:28:49 GMT

@Willson ,Is there a way to resolve CORS issues for HubSpot Events HTTP API? I need to allow that for several origins. Only portalId is sent there in the URL - does not look like secret information.

Although such events are accepted by the hubspot server but I would like to avoid CORS warnings

Re: CORS issue

Willson — Mon, 20 Jan 2020 09:23:52 GMT

Updated thread for conversation:

https://community.hubspot.com/t5/APIs-Integrations/Event-HTTP-API-and-cross-origin/m-p/312938/highlight/false#M29865