Auth0 CORS not allowed origin

Help
, , , ,
1

Hi there,

I’m trying to get my app working with auth0 but with not luck.
I’ve configured whole app but still getting annoing error:
Failed to load https://MY_APP.eu.auth0.com/usernamepassword/login: Response to preflight request doesn’t pass access control check: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘https://MY_APP_DOMAIN.com’ is therefore not allowed access
I’ve checked everything few times and not found any typos etc.

auth3
auth3711×151 38.3 KB
auth0
auth0774×638 29.2 KB
auth1
auth1715×720 40.8 KB

3

I need a little bit more information to diagnose why you are having this issue.

First, where are you using lock?

  1. If it is from your application (embedded at your website domain), then you are likely using an old version of lock. You need to update to the latest version of lock so that your application is using /co/authenticate instead of /usernamepassword/login.
    Also, I would highly recommend using a redirect flow instead of trying to embed lock into your application directly. This will give you a much better experience and also adhere more to the OIDC standard.

To do this, you would use auth0.js to call authorize from your application when someone wants to log in. And then you can configure your login page in the “hosted pages” section of the manage dashboard to look however you want, including the use of lock if you desire. This will make your networking much simpler. If you embed lock in your application, you will need to use CNAMEs, or your risk customers with third party cookies disabled to not be able to access your site.

I highly recommend using one of the quickstarts. You can get to a quickstart in nearly any language you are attempting to use. They should be redirecting to the login page at your auth0 tenant and you can use that example for configuring your system.

  1. If you are already using the login page at Auth0 and redirecting to /authorize, then please share your login page code as that would be helpful in figuring out what is wrong.