Error in userinfo endpoint - status 400 No 'Access-Control-Allow-Origin' header is present on the requested resource

[liav.zilbershtein]

Hi,
Recently I start to get 400 error when trying to get the user info.
The error in the console is :
Access to XMLHttpRequest at ‘https://oz-dev.eu.auth0.com/userinfo’ from origin ‘http://localhost:4200’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.
Request has been terminated
Possible causes: the network is offline, Origin is not allowed by Access-Control-Allow-Origin, the page is being unloaded, etc.

I tried to allow it in the dashboard - and it didn’t work(the address is already in the allowed callback urls). Moreover, i tried to connect to another tenant in auth0 and it works. It started to fail only in the last days.

The OPTIONS request is:

[liav.zilbershtein]

I tested it in postman and received an error similar to

Calling /userinfo and getting 400 Bad Request: Header Or Cookie Too Large

Hi all, I’m doing some testing with pulling in Azure AD groups into the claim. All is well from Azure to Auth0 and I can see the groups listed in the logs and dashboard. In my testing I have a very large number of groups (around 200 GUIDs). When I’m calling /userinfo after logging in and passing the JWT token, I received a 400 Bad Request error from /userinfo. Looking at the error in Fiddler, it’s actually coming from nginx, rather than Auth0 specifically. I’m hitting the eu.auth0.com endpoi…

The problem was that the token was large because my custom claim was too large.
I fixed it by cleaning it and deleting redundant data.

[konrad.sopala]

Thanks a lot for sharing it with the rest of community!