No 'Access-Control-Allow-Origin' header Problem

API Support Authentication
1

I see this when I visit my browser console and the connection is not complete, please someone point me to the solution.
**Access to XMLHttpRequest at 'https://sandbox.plaid.com/link/token/create' from origin 'http://localhost:3000' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.**

2

Hi @amjarmed,

The CORS error you’re seeing happens because Plaid’s API doesn’t allow direct requests from the client (browser) for security reasons. To fix this, make the request to https://sandbox.plaid.com/link/token/create from your server instead. Your server should request the link_token and then send it to the client, where you can use it to initialize Plaid Link.

This setup keeps your credentials secure and avoids CORS issues.

Hope this helps! Let us know if you have any questions!