# Embedded login/lock not working

**URL:** <https://community.auth0.com/t/embedded-login-lock-not-working/111220>\
**Category:** Get Help\
**Tags:** login-prompt-new-experience, login-experience\
**Created:** [July 13, 2023, 4:28pm UTC](https://community.auth0.com/t/embedded-login-lock-not-working/111220 "2023-07-13T16:28:14Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![tswetonic](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@tswetonic](https://community.auth0.com/u/tswetonic)\
**Post date:** [July 13, 2023, 4:28pm UTC](https://community.auth0.com/t/embedded-login-lock-not-working/111220/1 "2023-07-13T16:28:14Z")

</div>

Does embedded login using lock work? I’m seeing the problem described [here](https://community.auth0.com/t/no-access-control-allow-origin-header-issue/40467)  
and I have Allowed Web Origins and Allowed Origins (CORS) configured with my domain.

Is there anything else I can try? Has anyone gotten lock to work as an embedded login recently?

Thanks

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [July 13, 2023, 11:13pm UTC](https://community.auth0.com/t/embedded-login-lock-not-working/111220/3 "2023-07-13T23:13:20Z")

</div>

Hi @tswetonic,

Welcome to the Auth0 Community!

Yes, embedded login using Auth0 Lock does work. (Reference: [Embedded Login](https://auth0.com/docs/authenticate/login/embedded-login))

Seeing that you have been experiencing issues with the No ‘Access-Control-Allow-Origin’ header error, could you please confirm if the URL you are trying to reach is the same URL you defined in your Allowed Web Origins?

Additionaly, when looking at your application settings, it seems that your **Allowed Web Origins** in your application’s **Settings** view has not yet been set to the domain making the request. See [Configure Cross-Origin Resource Sharing](https://auth0.com/docs/get-started/applications/set-up-cors) for a thorouh guide to setup CORS.

Please let me how it goes for you after making these changes.

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![tswetonic](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@tswetonic](https://community.auth0.com/u/tswetonic)\
**Post date:** [July 14, 2023, 12:35am UTC](https://community.auth0.com/t/embedded-login-lock-not-working/111220/4 "2023-07-14T00:35:16Z")

</div>

As I said, I configured Allowed Web Origins according to the documentation.

---

<div class="post-metadata">

**Author:** ![rueben.tiow](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rueben.tiow/32/11646_2.png) [@rueben.tiow](https://community.auth0.com/u/rueben.tiow)\
**Post date:** [July 14, 2023, 4:49pm UTC](https://community.auth0.com/t/embedded-login-lock-not-working/111220/5 "2023-07-14T16:49:31Z")

</div>

Hi @tswetonic,

Thanks for following up and providing clarification.

I double-checked and see now that you have configured your Allowed Web Origins for your application to point to the correct domain.

Circling back, when we encounter the error message “No ‘Access-Control-Allow-Origin’ header,” it means that either the `Access-Control-Allow-Origin` header is not set correctly for the domain or it is missing entirely.

When this happens, we need to make sure the server sends the correct “Access-Control-Allow-Origin” header information in the response.

To learn more about this error, please refer to - [Reason: CORS header 'Access-Control-Allow-Origin' missing - HTTP | MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin).

For example, you can configure the server to send the following header.

```auto
Access-Control-Allow-Origin: [https://<my-tenant>.us.auth0.com](https://%3Cmy-tenant%3E.us.auth0.com/)

```

OR

```auto
Access-Control-Allow-Origin: *

```

Could you please let me know how this works for you?

If the issue persists even after making these changes, could you please [capture the login events in a HAR file](https://auth0.com/docs/troubleshoot/har) and send them to me as a direct message?

Thanks,  
Rueben

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [July 28, 2023, 4:50pm UTC](https://community.auth0.com/t/embedded-login-lock-not-working/111220/6 "2023-07-28T16:50:08Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.