Can I send a request from a website?

[yousan]

Hello.

I want to embed stuffs about HubSpot.

My website is closed and only for our company.

At the website, I want to request HubSpot API and get companies at HubSpot.

I searched and I got this article.

https://developers.hubspot.com/docs/api/faq#CORS_AJAX

I am thinking HubSpot cannot send CORS header as * so I cannot access.

How can I get the data?

Thanks.

[dennisedson]

Hi @yousan 

Are you still working on this? 

Have you considered creating an app that can serve as middleware?

@tjoyce , what are your thoughts?

[tjoyce · Accepted solution]

@yousan - Even if the website is closed to the outside, you should still use a server side process to handle the API connection and deliver data to the front-end website. A simple malicious chrome extension could very easily gain access to your sensitive HS information even through an intranet webpage. The best way to mitigate that is by using server code to pass data to the website. 

Do you know what server language your website is using?

[yousan]

@tjoyce Thank you for your reply. We are implementing server side programming for HubSpot API. It is really nice 😉

But some usecase is fit for front-end implementation. So we want to try front-end connection.

The system is closed and only few people (only our teammates) usigng the system. We try something. Thankyou.