[whatwg/fetch] Request header field access-control-allow-origin is not allowed by Access-Control-Allow-Headers in preflight response. (#467)

I'm working with django as an API like and reactjs for client side.

I'm trying to make a POST request and as I've to send the csrf token I'm facing this issue:

```
return fetch(endpoint, {
 method: req,
 headers: {
                'Content-Type': 'application/json',
                'X-CSRF-Token': csrfToken,
        },
 body: JSON.stringify(data),
})
```

but I'm having this error from chrome:

> Fetch API [...] Request header field access-control-allow-origin is not allowed by Access-Control-Allow-Headers in preflight response.

I don't find something working from the web.. Any ideas?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/467