# Unauthorized origin

Discover the solution for CORS errors.

For security reasons, our servers block requests from unauthorized [domains or origins](/explanation/application/trusted-origins). If this happens, you will see an error message similar to the one below in your browser's console:

> **Error**
>
> Access to fetch at `https://api.croct.io/...` from origin `https://www.example.com` has been blocked by CORS policy: Request header field priority is not allowed by `Access-Control-Allow-Headers` in preflight response.

In some cases, you may see a message like this:

> **Error**
>
> The origin of the request is not allowed in your application settings.

To check if your domain is authorized, open the [Application settings](https://app.croct.com/redirect/organizations/-organization-/workspaces/-workspace-/applications/-application-/settings) and scroll down to the **Trusted origins** section.

If your domain is not listed there, click on the **Add origin** and enter the domain you want to authorize.