Page 1 of 1

Request header field X-Parse-Master-Key is not allowed by Access-Control-Allow-Headers.

Posted: Thu Jun 14, 2012 10:56 am
by yllaw

Hi sir Max, I been creating Push Notifications through parse as my backend, I tried to create some of the samples of parse to add/install channel/s and applied it in tiggzi, when i test connection in REST service it create no errors but when i try to run it or Test and click the button that I invoked the REST service I getting this error
"Request header field X-Parse-Master-Key is not allowed by Access-Control-Allow-Headers." pls help. thanks

Image


Request header field X-Parse-Master-Key is not allowed by Access-Control-Allow-Headers.

Posted: Thu Jun 14, 2012 3:31 pm
by maxkatz

It looks like a cross-domain service invocation issue. See if enabling Tiggzi Proxy will help. I emailed my contact at Parse about this.


Request header field X-Parse-Master-Key is not allowed by Access-Control-Allow-Headers.

Posted: Thu Jun 14, 2012 6:45 pm
by maxkatz

Got the answer. Parse doesn't support using the Master key from JavaScript for security reasons. They expect you to use it only from a secure environment.