Cross-origin redirection denied by CORS policy: Cancelled load because it violates the resource's CORS response header

Greetings,

I am trying to implement cross-origin isolation for my web app, and am running into a quagmire in the process. I’ve set the headers in my VirtualHost in Apache properly, and have confirmed that cross-origin isolation is running. However, this has caused a conflict with my Auth0 implementation - specifically, I’ve started getting the message in the Subject of this topic.

I deduced that the probably cause was that I was changing domain from my app’s domain to my Auth0 domain (“dev-…”). I therefore set up a custom domain which matched my app’s domain name. Once this was in place, I tested and found that I got the same error, with the custom domain in place of the original Auth0 domain.

My suspicion is that I forgot to configure something (or things), but I’m not sure what. Please advise.

Thanks!

Addendum: Refreshing the page continues execution and brings up the Universal Login correctly.