title: Azure API Management > CORS and POST
body: <p>I'm using Azure API Management to deliver a clean interface to third parties for integration purposes.</p>
  
  <p>I want do a POST with a JSON object to create this object in the backend. This works fine in the test console available in the portal site, but it doesn't work when I try to do a simple client script from a web page:</p>
  
  <pre><code>$.ajax({
      url: 'https://.azure-api.net/api/samplerequest/create?' + $.param(params),
      type: 'POST',
      data: JSON.stringify(sampleRequest),
      contentType: "application/json; charset=utf-8",
      dataType: "json",
      success: function (data, par2, par3) {
          $("#txtResult").val(JSON.stringify(data));
      }
  });
  </code></pre>
  
  <p>Setting the contentType header to 'application/json' forces the browser to perform an OPTIONS call first. My WebAPI project is setup to enable CORS and I have tested this. My WebAPI project returns the following headers for the OPTIONS method:</p>
  
  <p>Access-Control-Allow-Head...    content-type
  Access-Control-Allow-Orig...    *</p>
  
  <p>However, if I try to call this operation by using the Azure Management API, I get a 200 status for the OPTIONS method, but no other headers are present. I've tried many policy-configurations, this was my latest attempt:</p>
  
  <pre><code>&lt;policies&gt;
      &lt;inbound&gt;
          &lt;base /&gt;
          &lt;cors&gt;
              &lt;allowed-origins&gt;
                  &lt;origin&gt;*&lt;/origin&gt;
                  &lt;!-- allow any --&gt;
              &lt;/allowed-origins&gt;
              &lt;allowed-methods&gt;
                  &lt;method&gt;POST&lt;/method&gt;
                  &lt;method&gt;OPTIONS&lt;/method&gt;
              &lt;/allowed-methods&gt;
              &lt;allowed-headers&gt;
                  &lt;header&gt;contentType&lt;/header&gt;
              &lt;/allowed-headers&gt;
          &lt;/cors&gt;
      &lt;/inbound&gt;
      &lt;outbound&gt;
          &lt;base /&gt;
      &lt;/outbound&gt;
  &lt;/policies&gt;
  </code></pre>
  
  <p>What am I missing to make this work?</p>