# Test that non white listed domain can't access rest api

**URL:** https://community.wowza.com/t/test-that-non-white-listed-domain-cant-access-rest-api/48220
**Category:** Wowza Streaming Engine
**Created:** [March 4, 2017, 10:13am UTC](https://community.wowza.com/t/test-that-non-white-listed-domain-cant-access-rest-api/48220 "2017-03-04T10:13:54Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![aru\_ja](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/32.png) [@aru\_ja](https://community.wowza.com/u/aru_ja)
#### Post date: [March 4, 2017, 10:13am UTC](https://community.wowza.com/t/test-that-non-white-listed-domain-cant-access-rest-api/48220/1 "2017-03-04T10:13:54Z")

</div>

I have to test using postman that non white listed domain can’t access rest api. I am new to CORS- I have following questions-

1. When I send say POST request from postman, what will be origin header value? 2. To test that non whitelisted domain can not access rest api, do I have to set origin header as white listed domain and then post request and check the headers in response? Please advice. Thanks