Embed Autodesk Fusion 360 shared preview failing due to blocked CORS policy: No 'Access-Control-Allow-Origin'

I'm trying to embed an HTML iFrame with a sharing link generated by Autodesk Fusion 360. I've confirmed the embed works on another website.

I made an iFrame component in Retool and added my url.

In the Chrome developer console this error is logged:

Access to XMLHttpRequest at 'https://xxxx.autodesk360.com/shares/metadata/XXXXXXX?' from origin 'null' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Hi @mr-matt! Since JS in Retool runs in a sandbox, the CORS value will always have a null origin. Would you mind sharing the URL you're passing in, as well as a screenshot of the component settings?

Sure: Fusion


Thank you! After some testing, it looks like you'll just need to check the "Storage and cookies" box. Let me know how this works for you :crossed_fingers:

2 Likes

Brilliant, thank you works for me too!