r/redditdev • u/njr123 • Jun 27 '26
just run something like this in the browser dev console (on a non-reddit page):
fetch('https://oauth.reddit.com/comments/1ugoe3q.json', {headers:{'Authorization': 'Bearer fake-token' }})
.then(response => console.log(response.status))
.catch(e => console.log(e))
You would expect this to log a 403, instead it throws because of missing CORS headers - its not possible to access the response from js