title: Calling external REST Api
body: <p>I am calling external rest API from my Angular2 application, and I receive this error in a response:</p>
  
  <pre><code>Request header field X-XSRF-TOKEN is not allowed by Access-Control-Allow-Headers in preflight response.
  </code></pre>
  
  <p>Is there anything I can do about it when I don't have a control over the server?</p>
  
  <p>Here is what I am trying to do:</p>
  
  <pre><code>    this._http.get('https://api-v3.mojepanstwo.pl/dane/wojewodztwa')
          .map(res=&gt;res.json())
          .subscribe(
              success=&gt;{
                  console.log(success);
              }
          )
  </code></pre>
  
  <p>When I am trying to make GET method on this endopint in POSTMAN, it works fine. In Chrome, it throws the above error.</p>
  
  <p>This seems to be Chrome only issue - it works on Safari and Firefox.</p>
  
  <p>It works fine when I am using jQuery to get the response:</p>
  
  <pre><code> $.get("https://api-v3.mojepanstwo.pl/dane/wojewodztwa", function(data){
        console.log(data);
    })
  </code></pre>