# AJAX / JQUERY API Call
**URL:** https://community.zammad.org/t/ajax-jquery-api-call/2508
**Category:** Technical assistance
**Created:** [May 17, 2019, 7:32am UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508 "2019-05-17T07:32:37Z")
**Posts on this page:** 9
**Page:** 2
### Author:  [@Rolandrevolvermann](https://community.zammad.org/u/Rolandrevolvermann)
#### Post date: [July 1, 2019, 7:47am UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/21 "2019-07-01T07:47:13Z")
Now i tested a token with ALL permissions. Nothing changed. Im pretty sure the problem is based on wrong CORS settings. So thats the reason why i asked about a sample nginx CORS setting file.
@thorsten Im not sure, but if [support.zammad.com](http://support.zammad.com) is running local/intern, its the same konfiguration as mine: i have a ubuntu virtual box running. zammad runs on localhost and i try to connect from local also with a python simpleHTTP Server. I think that setup should work, or im wrong?
---
### Author:  [@Rolandrevolvermann](https://community.zammad.org/u/Rolandrevolvermann)
#### Post date: [July 2, 2019, 7:49am UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/22 "2019-07-02T07:49:12Z")
Here is my zammad.conf (One version of “thousends” i have tried). No more ideas now…
#
```
# this is the nginx config for zammad
#
upstream zammad-railsserver {
server 127.0.0.1:3000;
}
upstream zammad-websocket {
server 127.0.0.1:6042;
}
server {
listen 80;
# replace 'localhost' with your fqdn if you want to use zammad from remote
server_name localhost;
root /opt/zammad/public;
access_log /var/log/nginx/zammad.access.log;
error_log /var/log/nginx/zammad.error.log;
client_max_body_size 50M;
location ~ ^/(assets/|robots.txt|humans.txt|favicon.ico) {
expires max;
}
add_header 'Access-Control-Allow-Origin' *;
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET';
location /ws {
add_header 'Access-Control-Allow-Origin' *;
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET';
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header CLIENT_IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 86400;
proxy_pass http://zammad-websocket;
}
location / {
add_header 'Access-Control-Allow-Origin' *;
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET';
proxy_set_header Host $http_host;
proxy_set_header CLIENT_IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 300;
proxy_pass http://zammad-railsserver;
gzip on;
gzip_types text/plain text/xml text/css image/svg+xml application/javascript application/x-javascript application/json application/xml;
gzip_proxied any;
}
}
```
---
### Author:  [@Rolandrevolvermann](https://community.zammad.org/u/Rolandrevolvermann)
#### Post date: [July 2, 2019, 1:47pm UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/23 "2019-07-02T13:47:58Z")
No ideas? Vacation? 😄
---
### Author:  [@MrGeneration](https://community.zammad.org/u/MrGeneration)
#### Post date: [July 2, 2019, 1:50pm UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/24 "2019-07-02T13:50:34Z")
Hey,
sorry but we currently experience quite some support volume on the commercial site.
The community is free, which limits us and our time greatly.
Again: I still think thorsten did his requests on the local developer console which doesn’t need further CORS settings. But @anon29869905 might bring light into the dark here.
---
### Author:  [@Rolandrevolvermann](https://community.zammad.org/u/Rolandrevolvermann)
#### Post date: [July 3, 2019, 9:32am UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/25 "2019-07-03T09:32:53Z")
Sorry, I did not want to stress you 🙂
> I still think thorsten did his requests on the local developer console which doesn’t need further CORS settings.
Then i’m wrong…I thought the issue is caused by the “pre-flight” of the browser. And this IMO has to be handled by the nginx configuration.
PS: Heres the browser output. Browser “asked” with OPTIONS instead of GET.
---
### Author:  [@MrGeneration](https://community.zammad.org/u/MrGeneration)
#### Post date: [July 3, 2019, 2:13pm UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/26 "2019-07-03T14:13:55Z")
Zammad will answer with 404 error, as we do not support `OPTIONS` within that API-Route you’re using.
We can’t change that, that’s nothing we can help you with.
---
### Author:  [@Rolandrevolvermann](https://community.zammad.org/u/Rolandrevolvermann)
#### Post date: [July 3, 2019, 4:40pm UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/27 "2019-07-03T16:40:40Z")
> Zammad will answer with 404 error, as we do not support `OPTIONS` within that API-Route you’re using.
Sure, i know that.
> We can’t change that, that’s nothing we can help you with.
Thats nothing i demand. I dont say its a zammad bug. For me its just interesting why my .js is running on @anon29869905 system. So its not a script issue. Some research told me that the OPTION call causes when the browser made his preflight check . That handling of the preflight IMO is a server configuration. When my script is running on your system , and the setup is almost equal → my local server zammad config is wrong and your setup fine. All i asked for was a sample config of your nginx. YOU dont have to change Zammad 😉
---
### Author:  [@anon29869905](https://community.zammad.org/u/anon29869905)
#### Post date: [July 9, 2019, 2:35pm UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/28 "2019-07-09T14:35:28Z")
Hi @Rolandrevolvermann - my time currently very limited. However, I don’t want to let you in the dark. You can find the file that is responsible for setting the headers here: [zammad/app/controllers/application\_controller/sets\_headers.rb at 9503ff20cefcfc39cb451562d7ec4fd440198564 · zammad/zammad · GitHub](https://github.com/zammad/zammad/blob/9503ff20cefcfc39cb451562d7ec4fd440198564/app/controllers/application_controller/sets_headers.rb#L18)
I assume you need to change that in your setup as well.
Regarding my test result: I was totally out of scope and ran it on the same domain (so exactly not your use case). However, I don’t have the time to setup a testing env so I can’t provide anything else valuable at the current time. Good luck 🤞
---
### Author:  [@system](https://community.zammad.org/u/system)
#### Post date: [November 6, 2019, 2:35pm UTC](https://community.zammad.org/t/ajax-jquery-api-call/2508/29 "2019-11-06T14:35:30Z")
This topic was automatically closed 120 days after the last reply. New replies are no longer allowed.
[Previous page](https://community.zammad.org/t/ajax-jquery-api-call/2508.md?page=1)