---
title: "CORS"
source: https://dev.pageseeder.com/reference/glossary/cors.html
description: "CORS is an HTTP-header mechanism enabling servers to permit cross-origin resource access from specific origins. PageSeeder supports CORS by allowing configuration through OAuth clients that match acceptable origin URIs."
last_updated: 2026-09-08T12:22:54+10:00
tokens: ~235
---

# CORS

**Cross-Origin Resource Sharing** ([CORS](https://developer.mozilla.org/en-US/docs/Glossary/CORS)) is an HTTP-header based mechanism that allows a server to indicate any origins (domain, scheme, or port) other than its own, from which a browser is to permit to load resources.

The [same-origin security policy](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy) forbids cross-origin access to resources. But CORS gives web servers the ability to say they want to opt into allowing cross-origin access to their resources.

## Configuration

Unless specified otherwise, most API services support CORS. To define the origins that are acceptable, create an [OAuth client](oauth_client.md) that matches the origin PageSeeder is to accept.

For example, to support a cross-origin request from an app at `https://app.example.net` , you need to register an OAuth client and set its URI as `https://app.example.net`.