# Allow Any Origin in Tryton

**URL:** https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913
**Category:** Developer
**Created:** [January 26, 2024, 1:49pm UTC](https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913 "2024-01-26T13:49:51Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![yarzai](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/yarzai/32/2767_2.png) [@yarzai](https://discuss.tryton.org/u/yarzai)
#### Post date: [January 26, 2024, 1:49pm UTC](https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913/1 "2024-01-26T13:49:51Z")

</div>

Hi,

I’ve encountered an issue while developing endpoints using the [User Application](https://docs.tryton.org/projects/server/en/latest/topics/user_application.html). I’m trying to allow any origin to access my endpoints. I’ve used the `[web] cors = *` configuration, but unfortunately, it hasn’t worked.

Is there any other method or configuration to allow access from any domain?

Your assistance on this matter is highly appreciated.

Thank you.

---

<div class="post-metadata">

### Author: ![ced](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/ced/32/1237_2.png) [@ced](https://discuss.tryton.org/u/ced)
#### Post date: [January 26, 2024, 2:13pm UTC](https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913/2 "2024-01-26T14:13:00Z")

</div>

We support only explicit origin in `cors`, there is no wildcard matching.

But there is an exception for extension like `moz-extension://` and `chrome-extension://` which are considered as `null` origin.

Also there is a decorator to allow null origin for the decorated entrypoint.

---

<div class="post-metadata">

### Author: ![yarzai](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/yarzai/32/2767_2.png) [@yarzai](https://discuss.tryton.org/u/yarzai)
#### Post date: [January 26, 2024, 2:31pm UTC](https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913/3 "2024-01-26T14:31:14Z")

</div>

can I turn off the CORS for development purposes?

---

<div class="post-metadata">

### Author: ![ced](https://discuss-cdn.tryton.org/user_avatar/discuss.tryton.org/ced/32/1237_2.png) [@ced](https://discuss.tryton.org/u/ced)
#### Post date: [January 26, 2024, 2:38pm UTC](https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913/4 "2024-01-26T14:38:12Z")

</div>

No but you can put your localhost.

---

<div class="post-metadata">

### Author: ![system](https://discuss-cdn.tryton.org/uploads/default/original/1X/c6f8ec0a40525cdcd50058c734283450a4b3d38b.png) [@system](https://discuss.tryton.org/u/system)
#### Post date: [January 27, 2024, 2:39am UTC](https://discuss.tryton.org/t/allow-any-origin-in-tryton/6913/5 "2024-01-27T02:39:09Z")

</div>

This topic was automatically closed 12 hours after the last reply. New replies are no longer allowed.
