GSA/code-gov-api

API Calls Not Working for DOE on Chrome

DanielJDufour opened this issue · 1 comments

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
See steps here: GSA/code-gov-web#672

Expected behavior
A clear and concise description of what you expected to happen.
API calls should work

Screenshots
If applicable, add screenshots to help explain your problem.
See GSA/code-gov-web#672

Desktop (please complete the following information):

  • OS: [e.g. iOS] Windows 10
  • Browser [e.g. chrome, safari] Chrome
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.
Original issue posted here: GSA/code-gov-web#672

froi commented

Found the issue. The API gateway was rejecting all requests from https://www.code.gov/. The www subdomain has been added to the HTTP referer whitelist and is now working.

Before updating the HTTP referer whitelist:
screenshot 2018-10-06 23 55 51

After updating the HTTP referer whitelist:
image