“No 'Access-Control-Allow-Origin' header is present on the requested resource”

If I understood it right you are doing an XMLHttpRequest to a different domain than your page is on. So the browser is blocking it as it usually allows a request in the same origin for security reasons. You need to do something different when you want to do a cross-domain request. A tutorial about how to achieve that is Using CORS. When you are using postman they are not restricted by this policy. Quoted from Cross-Origin XMLHttpRequest: The easy way is to just add the extension in google chrome to allow access using CORS. (https://chrome.google.com/webstore/detail/allow-control-allow-origi/nlfbmbojpeacfghkpbjhddihlkkiljbi?hl=en-US) Just enable this extension whenever you want allow access to no 'access-control-allow-origin'header request. Or In Windows, paste this command in run window chrome.exe --user-data-dir="C:/Chrome dev session" --disable-web-security this will open a new chrome browser which allow access to no 'access-control-allow-origin' header request.

273 down vote accepted

If I understood it right you are doing an XMLHttpRequest to a different domain than your page is on. So the browser is blocking it as it usually allows a request in the same origin for security reasons. You need to do something different when you want to do a cross-domain request. A tutorial about how to achieve that is Using CORS. When you are using postman they are not restricted by this policy. Quoted from Cross-Origin XMLHttpRequest:

73 down vote

The easy way is to just add the extension in google chrome to allow access using CORS. (https://chrome.google.com/webstore/detail/allow-control-allow-origi/nlfbmbojpeacfghkpbjhddihlkkiljbi?hl=en-US) Just enable this extension whenever you want allow access to no 'access-control-allow-origin'header request. Or In Windows, paste this command in run window chrome.exe --user-data-dir="C:/Chrome dev session" --disable-web-security this will open a new chrome browser which allow access to no 'access-control-allow-origin' header request.