# Cors issue Access-Control-Allow-Headers

**URL:** <https://discuss.konghq.com/t/cors-issue-access-control-allow-headers/9707>\
**Category:** General\
**Created:** [January 27, 2022, 4:45pm UTC](https://discuss.konghq.com/t/cors-issue-access-control-allow-headers/9707 "2022-01-27T16:45:32Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![arunagirinathan.v](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@arunagirinathan.v](https://discuss.konghq.com/u/arunagirinathan.v)\
**Post date:** [January 27, 2022, 4:45pm UTC](https://discuss.konghq.com/t/cors-issue-access-control-allow-headers/9707/1 "2022-01-27T16:45:32Z")

</div>

Request header field access-control-allow-methods is not allowed by Access-Control-Allow-Headers in preflight response.  
&  
Request header field "custom header (x-api-key) " is not allowed by Access-Control-Allow-Headers in preflight response.

how to fix both issues CORS policy:?

I had added the global cors plugin following this url : [CORS plugin | Kong Docs](https://docs.konghq.com/hub/kong-inc/cors/)

My CORS plugin is details are  
{  
“config”: {  
“credentials”: true,  
“preflight\_continue”: true,  
“methods”: [  
“GET”,  
“POST”,  
“PUT”,  
“DELETE”,  
“OPTIONS”

```
],
"max_age": 7200,
"headers": [
  "Accept",
  "Accept-Version",
  "Content-Length",
  "Content-MD5",
  "Content-Type",
  "Date",
  "X-Auth-Token",
   "origin",
"Origin",
"x-requested-with",
 "Access-Control-Allow-Headers",
"X-Requested-With",
"Authorization",
"Access-Control-Request-Method",
"Access-Control-Request-Headers"
],
"exposed_headers": [
  "X-Auth-Token"
],
"origins": [
  "*"
]

```

},  
“id”: “3c4da430-5dd6-42fb-909d-5e14dd4299ed”,  
“name”: “cors”,  
“consumer”: null,  
“created\_at”: 1642467518,  
“route”: null,  
“service”: null,  
“tags”: null,  
“enabled”: true,  
“protocols”: [  
“grpc”,  
“grpcs”,  
“http”,  
“https”  
]  
}  
i tried all the headers also

it is working for one microservice and it is not working for other service

let me know how to fix this issue?