# CORS - not allowed even though listed

**URL:** <https://community.auth0.com/t/cors-not-allowed-even-though-listed/23096>\
**Category:** Get Help\
**Created:** [March 25, 2019, 5:43pm UTC](https://community.auth0.com/t/cors-not-allowed-even-though-listed/23096 "2019-03-25T17:43:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![stan.yurynets](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stan.yurynets/32/10625_2.png) [@stan.yurynets](https://community.auth0.com/u/stan.yurynets)\
**Post date:** [March 25, 2019, 5:43pm UTC](https://community.auth0.com/t/cors-not-allowed-even-though-listed/23096/1 "2019-03-25T17:43:48Z")

</div>

Hi All -

I’m getting a CORS error the moment I call the login() on lock:

Access to XMLHttpRequest at ‘[https://fotonovelty-test.auth0.com/user/ssodata](https://fotonovelty-test.auth0.com/user/ssodata)’ from origin ‘[http://2018.wellplanned.events](http://2018.wellplanned.events)’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

Even though my client settings list the calling domain in cors allowed origins.

![2019-03-25%2013_41_07-Window](https://global.discourse-cdn.com/auth0/original/2X/f/fa4b88f85e3ad59dbe29ae109e6d67afa989c10d.png)

 ![2019-03-25%2013_41_40-Window](https://global.discourse-cdn.com/auth0/original/2X/b/b0465c5d4f55052e82aede241389726c60b3e50e.png)

Any help greatly appreciated!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [March 26, 2019, 9:49am UTC](https://community.auth0.com/t/cors-not-allowed-even-though-listed/23096/2 "2019-03-26T09:49:34Z")

</div>

Hey there!

Can you share a bit more context around what you’re trying to build and what blocks you use for doing to?

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [August 30, 2019, 1:01pm UTC](https://community.auth0.com/t/cors-not-allowed-even-though-listed/23096/3 "2019-08-30T13:01:09Z")

</div>


