Getting cors error when trying to call set password api

I am trying ot call set password api, but getting error as [[ Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.]]

I have set origin on okta. but still getting this error. Could you please confirm what exactly causing this issue. I am using oauth 2 and it is working fine when i am trying ot login or create user using api. is there any roles required to set password using api or any other issue??
Please advise…

Hi @ankushbanduni

Have you tried using the postman collections?
Can you post the code and the exact API you’re trying to call?

Please find the below code snippet. I have edit authorization key below for security reason. coudl you please advise:-
const httpOpt = {
headers: new HttpHeaders({
‘Access-Control-Allow-Methods’: ‘GET,POST’,
‘Accept’: ‘application/json’,
‘Cache-Control’: ‘no-cache’,
‘Content-Type’: ‘application/json’,
‘Authorization’: 'SSWS ’ + ‘0089mrDTm4_S4XifO5NQm’


const body = {
  'credentials': {
    'password' : { 'value': form['password'],
 console.log(body);‘’, body, httpOpt)
.subscribe(res => {

  err => {


I think the issue is this :point_up_2:
Change it to and you should be good to go.

Let me know if that works.

i have tried it tooo. but no luck…

Ah… I tried with and without admin and it works fine for me.
I’m using the postman collections reference here -

Import the users collection from above and check if that works.
Try generating a new API key and use that in postman.

the strange thing is it is working fine on postman. but not in my angular app. is it something related to roles or something else?

@vijet: Does it need any sessiontoken?

@ankushbanduni - You don’t need a sessionToken for this operation. You only need an API token.