Requests to Officers API returning CORS Error & 403

[sharon_robinson]

When we are trying to get the details of officers for a company we get the following

Access to XMLHttpRequest at 'https://api.company-information.service.gov.uk/company/.../officers' from origin '...' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

The ‘companies’ request is returning as expected, but the ‘officers’ call is continually returning the above.

Have there been any changes to the API recently that would affect this? From what we can see there doesn’t appear to be any Access-Control-Allow-Origin response header on the ‘officers’ request.

[andrew2]

I’ve had a similar problem for months - and just crickets from CH.

Company Officers API 401 CORS Issue

@MarkWilliams If you want a demo of the problem, use the refresh icon on this page with the F12 del tools window open: https://www.myeventflo.com/crisp/compare.aspx (green circle arrow buttons) If I remove the fetch_officer_data() function I get company and PSC data just fine. All three fetch functions use the same requester function sendRequest() which has var headers = new Headers({ ‘Authorization’: 'Basic ’ + apikey64, ‘Content-Type’: ‘text/json’, ‘Origin’: ‘https://www.myeventflo.com/’…

If you want to talk and try and work out what we have in common we might get some leads.

[ed.reid]

We have also been having this issue from at least April 14th. Companies House have suggested that this may have been triggered by another Change they had implemented on the Officers API but we have not had any further update since.

@MArkWilliams is there any update on this issue as of yet please?

Thanks,
Ed

[MArkWilliams]

We have now found the issue and are looking at a fix.