:_mod-docs-content-type: ASSEMBLY
[id="allowing-javascript-based-access-api-server"]
= Allowing JavaScript-based access to the API server from additional hosts
include::_attributes/common-attributes.adoc[]
:context: auth-allowed-origins

toc::[]

[role="_abstract"]
By default, the cluster restricts API server requests to the web console for security. Because the default configuration only permits the web console, you must update the API Server configuration of the cluster to approve additional hostnames for API and OAuth access.

include::modules/auth-allowing-javascript-access-api-server.adoc[leveloffset=+1]
