Hi, We’re getting the following error after upgrading Auth0 WP plugin to v4.0.0. Access to XMLHttpRequest at 'https:/[our auth0 account].eu.auth0.com/usernamepassword/challenge' from origin 'https://[our domain].com' has been blocked by CORS policy: Response to preflight request doesn't pass acces…

Hello! Welcome to our community. You would have to set your actual domain in the Allowed Web Origins field. Please, let us know if that solution works for you. Thanks.

Hi Lucas, Thank you for response. The domain is set properly in Allowed Web Origins field but we’re still getting the same error ( please see below ). [2020-04-03-uojqf] I’m attaching a screenshot of other fields as well, which might give you an idea of our setup: [2020-04-03-mzh1b] Thank yo…

Hi again! Please, make sure to set the domain on both Allowed Web Origins and Allowed Origins (CORS). Please, try that and see if that works! Thanks.

Hi again, Tried that now. But still no change unfortunately. [2020-04-03-tlynn] Thank you

Hi, we have the same issue after upgrading. Did all the steps below. How was it solved at your end developer6? Access to XMLHttpRequest at ‘https:/[our auth0 account].eu.auth0.com/usernamepassword/challenge’ from origin ‘https://[our domain].com’ has been blocked by CORS policy: Response to prefli…

We’re getting the same issue since updating to the wordpress plugin v4.0. We set the domain in both Allowed Web Origins and Allowed Origins (CORS). Our error is identical to the one above.

@itdstv.com & @robert4 Unfortunately we have not solved it yet. Downgraded to v3.11.3 until we have a solution.

Apologies for the trouble here and happy to help troubleshoot. Can someone post what page(s) that this error is appearing on and what action is being taken to generate it? Also, if you can post any non-default settings you’re using, specifically: Custom domain? Universal login? Widget or shortcod…

Hi, Unfortunately we don’t have a live environment which uses v4.0 atm. But I can say the following regarding our settings: Custom domain: No Universal login: No Widget or shortcode login form: Yes Passwordless: No Also: The error occurs right way on page load WP v5.3.2, WooCommerce v3.9.2 and…

The error occurs right way on page load Just on wp-login.php? Universal login: No Have you considered switching to Universal Login? The embedded login form won’t remain in the plugin indefinitely.

No 'Access-Control-Allow-Origin' header issue

Get Help

developer6 April 3, 2020, 3:51pm 5

Hi again,

Tried that now. But still no change unfortunately.

Thank you

Topic		Replies	Views
CORS Policy Issue with Auth0 Integration on WordPress Site Get Help configuration , application	2	30	April 15, 2026
Missing "Access-Control-Allow-Origin" header in CORS pre-flight for "/authorize" endpoint Get Help cors	4	8706	March 13, 2025
No 'Access-Control-Allow-Origin' header is present on the requested resource Get Help cors	32	17055	January 20, 2021
CORS Error when application is set to allow Get Help login-experience , login-prompt-new-experience	1	715	February 6, 2025
CORS issues on localhost Get Help cors , localhost	10	21348	May 28, 2021

No 'Access-Control-Allow-Origin' header issue

Related topics