CORS error for google API GET request with access token

project.clj

@@ -4,11 +4,9 @@
   :license {:name "EPL-2.0 OR GPL-2.0-or-later WITH Classpath-exception-2.0"
             :url "https://www.eclipse.org/legal/epl-2.0/"}
   :dependencies [[org.clojure/clojure "1.10.0"]
-                 [ring/ring-jetty-adapter "1.8.0"]
-                 [compojure "1.6.1"]
                  [org.clojure/clojurescript "1.10.312"]
-                 [reagent "0.9.1"]
-                 [ring-server "0.5.0"]]
+                 [ring "1.7.1"]
+                 [reagent "0.9.1"]]
   :repl-options {:init-ns googlefit-api-test.core}
   :main googlefit-api-test.core
   :source-paths ["src/clj" "src/cljs"]

src/clj/googlefit_api_test/core.clj

@@ -1,18 +1,5 @@
 (ns googlefit-api-test.core
-  (:require [compojure.core :refer [defroutes ANY POST GET]]
-            [compojure.route :refer [not-found resources]]
-            [ring.adapter.jetty :as jetty]
-            [ring.util.response :as resp]
-            [ring.middleware.reload :refer [wrap-reload]]))
-
-;; (defroutes app-routes
-;;   (GET "/" [] (resp/resource-response "index.html" {:root "public"}))
-;;   (resources "/")
-;;   (not-found "<h1>Page not found</h1>"))
-
-;; (defn -main []
-;;   (jetty/run-jetty (wrap-reload #'app-routes) {:port 8000})
-;;   (println (str "Server is running on port 8000")))
+  (:require [ring.util.response :as resp]))
 
 (def route-set #{"/" "/tokenpage"})
 
@@ -21,4 +8,4 @@
    (when (route-set (:uri req))
      (some-> (resp/resource-response "index.html" {:root "public"})
              (resp/content-type "text/html; charset=utf-8")))
-   (not-found "Not found")))
+   (resp/not-found "Not found")))

src/cljs/googlefit-api-test/core.cljs

@@ -10,6 +10,16 @@
 
 (println fragment-string)
 
+(def xhr (js/XMLHttpRequest.))
+
+(.open xhr "GET" (str "https://www.googleapis.com/fitness/v1/users/me/dataSources" "access_token=" fragment-string) true)
+
+(. xhr send)
+
+(println (.-status xhr))
+
+;; (set! (. xhr onreadystatechange) (fn [] (js/console.log (.response xhr))))
+
 (defn appended-container [target]
   (let [oauth2-end-point "https://accounts.google.com/o/oauth2/v2/auth?scope=https%3A//www.googleapis.com/auth/fitness.activity.read&include_granted_scopes=true&response_type=token&redirect_uri=http%3A//localhost%3A9500/tokenpage&client_id=857819587666-2pm3q0sv9lvmv697afm0k6jblgvtjon9.apps.googleusercontent.com"