Power Bi Rest Api request bearer token works in Postman but not while using ajax!

[SoulsSama]

Hello all, so I've been trying to get bearer token to use refresh dataset from my website as an admin tool for faster access on cloud datasets and tables, from documentation  HERE  it works on trying it, but I need bearer token to make it work outside this page, so I found the endpoint on this forum to do it, I followed the steps from another post in HERE and it works on Postman as intended, but on Ajax it gives me a lot of errors, CORS policy error and code 400(Bad Request), Can you please help me here? What am I missing or doing wrong? how to fix it?

Here is my Postman working endpoint(data changed for security issues):


And here is my ajax code  and the error it returns:

            let reqBody = {
                grant_type: "password",
                resource: "https://analysis.windows.net/powerbi/api",
                username: "username",
                password: "password",
                client_id: "clientid",
                client_secret: "",
            }

            $.ajax({
                type: "POST",
                url: `https://login.windows.net/common/oauth2/token`,
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8', 
                'Access-Control-Allow-Origin':"*"
           },
                data: JSON.stringify(reqBody),
                contentType: "application/json",
                crossDomain: true,
                dataType: 'json',
                success: function (response) {
                    console.log("response: ", response);
                },
                error: function (error) {
                    console.log("error: ",error);
                }
            });

[v-shex-msft · Accepted solution]

HI @SoulsSama,

This error message mentions the parameter 'Access-Control-Allow-Origin' that you defined in the header not allowed to use and is being blocked in the request. You can try to remove this option and try again.
Regards,

Xiaoxin Sheng