I am trying to perform POST operations in SharePoint 2013 environment using REST API from external application running under the same company domain. Till now I am to do the GET operation successfully but while performing the POST Action from the same steps I am getting Error 401 (Unauthorized) even though I am the Site Collection Administrator of the site. Below is the code that I am trying.

var hostUrl = "http://mycompany.sharepoint.com/sites/site1/SharePoint/oAuth";
function getFormDigest() {
    console.log("Getting Form Digest..");
    $.support.cors = true;
    var _formDigest;
        url: hostUrl + "/_api/contextinfo",
        type: "POST",
        dataType: "json",

        headers: { "Accept": "application/json; odata=verbose" },
        xhrFields: { withCredentials: true },
        async: false,
        success: function (data) {
            _formDigest = data.d.GetContextWebInformation.FormDigestValue;
            console.log("Form Digest Done");

        error: function () {
            console.log("Error Occured");

    return _formDigest;

function AddListItem() {
    var _digest = getFormDigest();
    console.log("Add List item called with digest value -- " + _digest);
            url: "http://mycompany.sharepoint.com/sites/site1" + "/_api/web/lists/GetByTitle('TestList')/items",
            type: "POST",
            data: JSON.stringify
                    type: "SP.Data.TestListListItem"
                Title: "SharePoint"
            xhrFields: { withCredentials: true },
            headers: {
                "Accept": "application/json;odata=verbose",
                "X-RequestDigest": _digest
            success: function (data, status, xhr) {
                console.log("Item Inserted..!!");
            error: function (xhr, status, error) {
                console.log("Error Occured");

I am able to get the Form Digest value properly and the above code is working fine when I am using the code inside SharePoint Page using content editor web part. And I have already done the CORS part after which I am able to do the GET request.

Thanks in advance..

  • Did you find any solution? I am facing the exact same issue.
    – Hrishikesh
    Commented Jul 7, 2018 at 5:40
  • @Hrishikesh : Please check my answer and let me know if you face any issue Commented Jul 9, 2018 at 11:23

1 Answer 1


Finally got it working. Since we are trying to send the credentials over the request, firstly the preflight OPTIONS request is sent to SharePoint server without credentials which returns the 401 error, so our main request is dropped automatically. I referred this LINK which contains the detailed explanation of error and the solution.

Happy coding..

  • Is really URL Rewriting the only available choice? I see this just as a workaround and not a real application level solution; this is not a correct handling of the preflight request IMHO, is just preventing Sharepoint from receiving it.
    – Federinik
    Commented Dec 17, 2019 at 17:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.