# Failed by cors - correct client

**URL:** <https://community.auth0.com/t/failed-by-cors-correct-client/9721>\
**Category:** Get Help\
**Created:** [March 5, 2018, 3:58pm UTC](https://community.auth0.com/t/failed-by-cors-correct-client/9721 "2018-03-05T15:58:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![liquidsphere0](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@liquidsphere0](https://community.auth0.com/u/liquidsphere0)\
**Post date:** [March 5, 2018, 3:58pm UTC](https://community.auth0.com/t/failed-by-cors-correct-client/9721/1 "2018-03-05T15:58:10Z")

</div>

I have a website (landing page) where people can sign up from. Sometimes when I check the dashboard logs, I see ‘failed by cors’ errors which is strange. I’m using the correct client-id (i’ve double checked many times) and it always says origin not allowed, then it lists something weird, instead of listing the allowed origins for the client, it says the following:

```
"allowedOrigins": [
      "https://manage.auth0.com",
      "https://auth0.com/docs",
      "https://login.auth0.com",
      "https://docs.auth0.com",
      "https://manage.auth0.com"
    ],

```

“originalUrl”: “/dbconnections/signup”

I’m having trouble figuring out what’s going on. I’ve tested the signup many times and it works (I’m not talking about local testing, I tested the actual landing page). And there are people that have signed up, but when do I see these failed by cors logs sometimes?

---

<div class="post-metadata">

**Author:** ![mchicote](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mchicote/32/7486_2.png) [@mchicote](https://community.auth0.com/u/mchicote)\
**Post date:** [March 27, 2018, 4:27pm UTC](https://community.auth0.com/t/failed-by-cors-correct-client/9721/2 "2018-03-27T16:27:16Z")

</div>

Hi  
I’m having the same problem. Did you manage to solve this @liquidsphere0?

Thanks!

---

<div class="post-metadata">

**Author:** ![liquidsphere0](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@liquidsphere0](https://community.auth0.com/u/liquidsphere0)\
**Post date:** [March 27, 2018, 4:37pm UTC](https://community.auth0.com/t/failed-by-cors-correct-client/9721/3 "2018-03-27T16:37:09Z")

</div>

Yea the issue for me was that the page performing requests had ‘www’ as part of the URL, but the allowed origins only had naked urls (no ‘www’)

---

<div class="post-metadata">

**Author:** ![mchicote](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mchicote/32/7486_2.png) [@mchicote](https://community.auth0.com/u/mchicote)\
**Post date:** [March 27, 2018, 5:31pm UTC](https://community.auth0.com/t/failed-by-cors-correct-client/9721/4 "2018-03-27T17:31:11Z")

</div>

Not my case, but thanks anyway!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [December 17, 2018, 11:18am UTC](https://community.auth0.com/t/failed-by-cors-correct-client/9721/5 "2018-12-17T11:18:16Z")

</div>