Custom script not returning posts

[kristinreddington]

Hello,

I have a simple custom Javascript script I'm adding to my Wordpress site where I fetch all photos from my Wordpress blog. Here's the script:

window.addEventListener('load', function() {
		fetch('https://api.tumblr.com/v2/blog/adriftluxury.tumblr.com/posts/photo?api_key=${MY_API_KEY}').then(res => {
			console.log(res);
		})
	});

The response above is what's logged as the API response. If I type the URL into a browser, I get the posts in an array, but when fetching them, it only returns a cors response without meta data or post data. Please let me know if my code looks correct or if this is an issue. Thank you

[cyle]

Hello @kristinreddington -- unfortunately you shouldn't use the Tumblr API in a browser client fetch like this. You're hitting a CORS error, it looks like. Also, by putting your fetch in the browser-side Javascript, you're exposing your API key publicly, which should be kept private, otherwise other people can use it for malicious purposes (and make it look like you are).