No 'Access-Control-Allow-Origin' header is present on the requested resource.

[ffflorian]

Server: node v6.7.0, Debian 8.6
Client: Ubuntu 16.04

After executing grunt on my server the app runs fine. But when I open the site in my browser, I only see the loading screen and get Access-Control-Allow-Origin errors:

Chromium 53:

https://prod-nginz-https.wire.com/access Failed to load resource: the server responded with a status of 403 (Forbidden)
[DOMAIN]/:1 XMLHttpRequest cannot load https://prod-nginz-https.wire.com/access. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://[DOMAIN]' is therefore not allowed access. The response had HTTP status code 403.
jquery.js:8630 POST https://prod-nginz-https.wire.com/access send @ jquery.js:8630ajax @ jquery.js:8166(anonymous function) @ AuthService.js:113
[DOMAIN]/:1 XMLHttpRequest cannot load https://prod-nginz-https.wire.com/access. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://[DOMAIN]' is therefore not allowed access. The response had HTTP status code 403.
jquery.js:8630 POST https://prod-nginz-https.wire.com/access send @ jquery.js:8630ajax @ jquery.js:8166(anonymous function) @ AuthService.js:113
[DOMAIN]/:1 XMLHttpRequest cannot load https://prod-nginz-https.wire.com/access. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://[DOMAIN]' is therefore not allowed access. The response had HTTP status code 403.
jquery.js:8630 POST https://prod-nginz-https.wire.com/access send @ jquery.js:8630ajax @ jquery.js:8166(anonymous function) @ AuthService.js:113
[DOMAIN]/:1 XMLHttpRequest cannot load https://prod-nginz-https.wire.com/access. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://[DOMAIN]' is therefore not allowed access. The response had HTTP status code 403.

Firefox 49:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://prod-nginz-https.wire.com/access. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).(unknown)
Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user’s experience. For more help http://xhr.spec.whatwg.org/raygun.vanilla.js:344:12
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://prod-nginz-https.wire.com/access/logout. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).

[herrmannplatz]

wire.com is the only origin that is allowed so far. if you want to test it locally u can use Chrome's --disable-web-security flag.

[ffflorian]

So there is no way for me to use Wire webapp on my own server without using the --disable-web-security flag?

[herrmannplatz]

Sorry to say, but yes. Will close this for now.

[cgsadmin]

@ffflorian,
that error is gone #1134 but now become other error
Please help me to get done installation with create new registration