CORS issue

[regazzoj]

Hi,

We made a dashboard which requests data from tasking manager API => CartONG Mapathon Dashboard
Unfortunately, we have an issue if we try to fetch data from HOTOSM API :

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://tasking-manager-tm4-production-api.hotosm.org/api/v2/projects/18630/queries/summary/. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 301.

Can you help me to find what is wrong ?

I don't know if it is related to an update of the tasking manager, or just a new configuration that I am missing (like new API).

Let me know if I was not clear or if you have any question.

Thanks for any help.

[prabinoid]

Hi @regazzoj, The issue occurred due to CORS policy restrictions, but we've added the domain to the allowed list, so it should now be resolved.
Please note that the API URL has changed with the new release — kindly update it from:
https://tasking-manager-tm4-production-api.hotosm.org/
to:
https://tasking-manager-production-api.hotosm.org/
Everything should work as expected after that. Please let me know if otherwise. Thanks!

[0live]

Hi @prabinoid , thanks for your answer.
I have updated the API's url and can confirm the CORS issue is now resolved.

However, I noticed a bug on the API while testing on a project. The abbreviated=true paramater causes an error on the /api/v2/projects/{project_id} endpoint for a GET request.

This request works: https://tasking-manager-production-api.hotosm.org/api/v2/projects/17938/?as_file=False&abbreviated=false
Whereas this one fails: https://tasking-manager-production-api.hotosm.org/api/v2/projects/17938/?as_file=False&abbreviated=true

I'm new to this project, so I’m not sure why we're using this parameter with the value true in our case. I’ll check with the team involved. In any case, I just wanted to let you know that this bug exists.

[prabinoid]

Hi @0live, thank you for this. Will fix this asap.