Cross-Origin Resource Sharing (CORS)
Developing with the CLM API is only available for CLM customers with a production account. To purchase a plan to gain access to the CLM API, contact Docusign Sales.
Cross-Origin Resource Sharing (CORS) refers to the ability to access a normally-restricted resource via JavaScript in a browser. By default, a browser will not allow POST, PATCH, and DELETE requests via JavaScript to a domain that did not originally serve the page.
Writing browser-based JavaScript applications or uploading and downloading documents to and from Docusign CLM from a browser can be helpful. CLM supports CORS requests for the Object, Task, and Content APIs for allowed domains for this reason.
For more information on how CORS is implemented for eSignature and other APIs, see Single-page applications and CORS.
To allow an origin domain for cross-domain requests, the origin domain must be allowed for the CLM account being accessed. In CLM Preferences, navigate to Manage Domains and add the domain that will serve the web pages that will access the API. You can use wildcards in the domains that you specify.
Best Practice: Only add the domains that are necessary, and use wildcards sparingly.