# \#cors **URL:** https://community.auth0.com/tag/cors/295.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Missing "Access-Control-Allow-Origin" header in CORS pre-flight for "/authorize" endpoint](https://community.auth0.com/t/missing-access-control-allow-origin-header-in-cors-pre-flight-for-authorize-endpoint/46820)
**Author:** [@TorbenGriebe](https://community.auth0.com/u/TorbenGriebe)\ **Replies:** 4\ **Last updated:** [March 13, 2025, 8:08pm UTC](https://community.auth0.com/t/missing-access-control-allow-origin-header-in-cors-pre-flight-for-authorize-endpoint/46820 "2025-03-13T20:08:39Z")
Hello Auth0 team, I’d like to pick up a closed topic regarding this issue: http://community.auth0.com/t/cors-pre-flight-fails-for-new-tenant-universal-login/45548 The mentioned topic describe exactly the problem I hav… --- ## [No 'Access-Control-Allow-Origin' header is present on the requested resource (ASP.NET Core Web API 3.1 + Angular)](https://community.auth0.com/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource-asp-net-core-web-api-3-1-angular/85129)
**Author:** [@tararia](https://community.auth0.com/u/tararia)\ **Replies:** 1\ **Last updated:** [September 19, 2023, 1:33pm UTC](https://community.auth0.com/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource-asp-net-core-web-api-3-1-angular/85129 "2023-09-19T13:33:36Z")
The frontend is angular SPA and the backend is ASP.NET Core Web API 3.1. The backend API contains only two endpoint: one public, one secured with \[Authorize\] attribute. I am able to login to the sample angular applicatio… --- ## [CORS issues with /authorize](https://community.auth0.com/t/cors-issues-with-authorize/90667)
**Author:** [@yaacov](https://community.auth0.com/u/yaacov)\ **Replies:** 3\ **Last updated:** [September 6, 2023, 11:18pm UTC](https://community.auth0.com/t/cors-issues-with-authorize/90667 "2023-09-06T23:18:55Z")
Hi, I am attempting to set up an auth0 integration with node.js backend and next.js frontend. The node backend uses the express-openid-connect library. When encountering a logged-out user, the node server redirects the… --- ## [CORS Error - New Tenant](https://community.auth0.com/t/cors-error-new-tenant/82606)
**Author:** [@Blowers.Max](https://community.auth0.com/u/Blowers.Max)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 7:26am UTC](https://community.auth0.com/t/cors-error-new-tenant/82606 "2022-04-29T07:26:29Z")
Hello, I created a new tenant to use for development and unfortunately came across the error: “Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://xxxx.us.auth0.com/pass… --- ## [CORS issue when testing on Android](https://community.auth0.com/t/cors-issue-when-testing-on-android/80079)
**Author:** [@worthy\_admin](https://community.auth0.com/u/worthy_admin)\ **Replies:** 2\ **Last updated:** [March 31, 2022, 11:11am UTC](https://community.auth0.com/t/cors-issue-when-testing-on-android/80079 "2022-03-31T11:11:10Z")
Hello, I recently updated our cordova plugins, and platform for android to satisfy Google’s Play Store API level 30 requirement. As I was testing on Android I noticed that I get a CORS issue when hitting the /oauth/tok… --- ## [CORS Tutorial: A Guide to Cross-Origin Resource Sharing](https://community.auth0.com/t/cors-tutorial-a-guide-to-cross-origin-resource-sharing/24034)
**Author:** [@ramiro](https://community.auth0.com/u/ramiro)\ **Replies:** 5\ **Last updated:** [May 16, 2019, 1:41pm UTC](https://community.auth0.com/t/cors-tutorial-a-guide-to-cross-origin-resource-sharing/24034 "2019-05-16T13:41:20Z")
Learn all about Cross-Origin Resource Sharing, how it protects you, and how to enable CORS in your applications Read on :hammer\_and\_wrench: \>\> What is CORS? Complete Tutorial on Cross-Origin Resource Sharing --- ## [No 'Access-Control-Allow-Origin' header issue](https://community.auth0.com/t/no-access-control-allow-origin-header-issue/40467)
**Author:** [@developer6](https://community.auth0.com/u/developer6)\ **Replies:** 34\ **Last updated:** [February 3, 2022, 2:32pm UTC](https://community.auth0.com/t/no-access-control-allow-origin-header-issue/40467 "2022-02-03T14:32:50Z")
Hi, We’re getting the following error after upgrading Auth0 WP plugin to v4.0.0. Access to XMLHttpRequest at 'https:/\[our auth0 account\].eu.auth0.com/usernamepassword/challenge' from origin 'https://\[our domain\].com' h… --- ## [Where are the post user registration hooks originated from? (CORS issue)](https://community.auth0.com/t/where-are-the-post-user-registration-hooks-originated-from-cors-issue/68630)
**Author:** [@anil.bunarci](https://community.auth0.com/u/anil.bunarci)\ **Replies:** 1\ **Last updated:** [August 30, 2021, 9:02pm UTC](https://community.auth0.com/t/where-are-the-post-user-registration-hooks-originated-from-cors-issue/68630 "2021-08-30T21:02:00Z")
Hi all, I’m trying to create a new record in the DB after a user registered to the app, and pass some data from that record to app\_metadata. To do that, I created a Post User Registration Hook and configured it to send… --- ## [Getting CORS error on my R-Shiny app configured with shinyproxy and auth0](https://community.auth0.com/t/getting-cors-error-on-my-r-shiny-app-configured-with-shinyproxy-and-auth0/63539)
**Author:** [@wahiduzzamankhan007](https://community.auth0.com/u/wahiduzzamankhan007)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 9:46am UTC](https://community.auth0.com/t/getting-cors-error-on-my-r-shiny-app-configured-with-shinyproxy-and-auth0/63539 "2021-05-31T09:46:26Z")
Hi there. I am hosting an R-Shiny app with shinyproxy and using auth0 for authentication. But I am getting this CORS error: Access to manifest at 'https://login.mysocialpulse.com/authorize?response\_type=code&client\_id=… --- ## [CORS issues on localhost](https://community.auth0.com/t/cors-issues-on-localhost/63137)
**Author:** [@dave6](https://community.auth0.com/u/dave6)\ **Replies:** 10\ **Last updated:** [May 28, 2021, 6:30pm UTC](https://community.auth0.com/t/cors-issues-on-localhost/63137 "2021-05-28T18:30:27Z")
I keep getting the following error when trying to update a user’s information using the following tutorial: https://auth0.com/docs/users/update-root-attributes-for-users http://locahost:3001 has been blocked by CORS p… --- ## [Domain has been blocked by CORS policy: No 'Access-Control-Allow-Origin'](https://community.auth0.com/t/domain-has-been-blocked-by-cors-policy-no-access-control-allow-origin/61515)
**Author:** [@JulesR2](https://community.auth0.com/u/JulesR2)\ **Replies:** 3\ **Last updated:** [April 23, 2021, 6:25am UTC](https://community.auth0.com/t/domain-has-been-blocked-by-cors-policy-no-access-control-allow-origin/61515 "2021-04-23T06:25:40Z")
Hi ! I’ve been trying to set up a basic authentication integration to my angular SPA with PHP backend. I’ve mostly been following this as well as Auth0 documentation. At this point, the backend is basically the code pr… --- ## [Auth0.min.js version 9.15.0 does not support CORS](https://community.auth0.com/t/auth0-min-js-version-9-15-0-does-not-support-cors/60867)
**Author:** [@Paton](https://community.auth0.com/u/Paton)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 7:01am UTC](https://community.auth0.com/t/auth0-min-js-version-9-15-0-does-not-support-cors/60867 "2021-04-19T07:01:53Z")
The latest deployed release of auth0.min.js (version 9.15.0) does not support CORS and therefore third-party subresource integrity hash generators cannot be used. https://cdn.auth0.com/js/auth0/9.15.0/auth0.min.js does … --- ## [Received CORS issue trying to reproduce quickstart demo in Rails](https://community.auth0.com/t/received-cors-issue-trying-to-reproduce-quickstart-demo-in-rails/60143)
**Author:** [@nils](https://community.auth0.com/u/nils)\ **Replies:** 6\ **Last updated:** [April 7, 2021, 10:54am UTC](https://community.auth0.com/t/received-cors-issue-trying-to-reproduce-quickstart-demo-in-rails/60143 "2021-04-07T10:54:27Z")
I tried to add auth0 to a Rails web app following the quickstart demo (I’ve successfully done it before with SPA and Rails API) and received an error. As a reference and to check everything, I downloaded the configure… --- ## [No 'Access-Control-Allow-Origin' header is present on the requested resource](https://community.auth0.com/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/56311)
**Author:** [@cyranms](https://community.auth0.com/u/cyranms)\ **Replies:** 32\ **Last updated:** [January 20, 2021, 6:34pm UTC](https://community.auth0.com/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/56311 "2021-01-20T18:34:45Z")
Hi community, I have an issue that suddenly I get a CORS error when requesting “/.well-known/jwks.json”. Access to fetch at 'https://\.auth0.com/.well-known/jwks.json' from origin 'http://localhost:3000' has be… --- ## [Create user webhook which should send request to my backend throw an error](https://community.auth0.com/t/create-user-webhook-which-should-send-request-to-my-backend-throw-an-error/41865)
**Author:** [@admindigital](https://community.auth0.com/u/admindigital)\ **Replies:** 0\ **Last updated:** [April 27, 2020, 3:59pm UTC](https://community.auth0.com/t/create-user-webhook-which-should-send-request-to-my-backend-throw-an-error/41865 "2020-04-27T15:59:35Z")
const request = require('request'); module.exports = function (user, context, cb) { console.log('webhook was started for ' + user.email) request.post({ url: 'http://35.180.70.70/webhook', body: { "externalI… --- ## [Universal Login with External JavaScript](https://community.auth0.com/t/universal-login-with-external-javascript/37286)
**Author:** [@justin.n](https://community.auth0.com/u/justin.n)\ **Replies:** 1\ **Last updated:** [February 5, 2020, 9:53pm UTC](https://community.auth0.com/t/universal-login-with-external-javascript/37286 "2020-02-05T21:53:12Z")
I am setting up Universal login with an external javascript file. So far I’m receiving the response: {“statusCode”:403,“description”:“Invalid state”,“name”:“AnomalyDetected”,“code”:“access\_denied”} I suspected this was… --- ## [CORS issue when attempting to logout from .NET Core Application](https://community.auth0.com/t/cors-issue-when-attempting-to-logout-from-net-core-application/22552)
**Author:** [@henry.delgado](https://community.auth0.com/u/henry.delgado)\ **Replies:** 3\ **Last updated:** [March 14, 2019, 4:24pm UTC](https://community.auth0.com/t/cors-issue-when-attempting-to-logout-from-net-core-application/22552 "2019-03-14T16:24:22Z")
I am currently following one of the quick starts for implementing Oauth2 on .NET Core 2.2 (Regular Web application). I can login successfully but I am having issues logging out. I am using Chrome and have tried to even… --- ## [CORS Origins not applying correctly](https://community.auth0.com/t/cors-origins-not-applying-correctly/12129)
**Author:** [@SaltyDH](https://community.auth0.com/u/SaltyDH)\ **Replies:** 7\ **Last updated:** [June 6, 2018, 10:46pm UTC](https://community.auth0.com/t/cors-origins-not-applying-correctly/12129 "2018-06-06T22:46:09Z")
I have two tenants with Auth0. A development one that was created a couple of years ago and a new one created this year. Setting the Allowed Origins (CORS) option on an application is being ignored on the new tenant. Wh… --- ## [CORS - Non-interactive client](https://community.auth0.com/t/cors-non-interactive-client/9392)
**Author:** [@ramithindula](https://community.auth0.com/u/ramithindula)\ **Replies:** 1\ **Last updated:** [March 2, 2018, 2:21pm UTC](https://community.auth0.com/t/cors-non-interactive-client/9392 "2018-03-02T14:21:08Z")
I’m getting a CORS issue when trying to get Auth0 Management API access token using non-interactive client. I tried adding http://localhost:8100 to Allowed Web Origins & Allowed Origins (CORS). It does not work. I can u… --- ## [Disabling CORS good enough?](https://community.auth0.com/t/disabling-cors-good-enough/9315)
**Author:** [@gregbruins](https://community.auth0.com/u/gregbruins)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 6:19pm UTC](https://community.auth0.com/t/disabling-cors-good-enough/9315 "2018-12-14T18:19:21Z")
If a web application communicates with it’s back end via REST API, and that API is only meant to serve the web app and no other client, and if they communicate with each other on the same origin (应用宝官网-全网最新最热手机应用游戏下载), w… --- ## [Receiving "cross origin login not allowed" with custom login & angular 1](https://community.auth0.com/t/receiving-cross-origin-login-not-allowed-with-custom-login-angular-1/7017)
**Author:** [@ciaran.byrne](https://community.auth0.com/u/ciaran.byrne)\ **Replies:** 4\ **Last updated:** [January 17, 2018, 9:13am UTC](https://community.auth0.com/t/receiving-cross-origin-login-not-allowed-with-custom-login-angular-1/7017 "2018-01-17T09:13:39Z")
I did the following: Created a SPA client and added http://localhost:3000 to Allowed Origins (CORS) Create a simple angular 1.6 SPA app Called the following and receiving the error - “cross origin login not allo… --- ## [CORS error calling passwordless from Cordova](https://community.auth0.com/t/cors-error-calling-passwordless-from-cordova/6564)
**Author:** [@fredguth](https://community.auth0.com/u/fredguth)\ **Replies:** 9\ **Last updated:** [January 9, 2018, 10:11am UTC](https://community.auth0.com/t/cors-error-calling-passwordless-from-cordova/6564 "2018-01-09T10:11:28Z")
Context: SPA Hybrid Using Cordova and WKWebview Not using Locks Passwordless login Our app works fine in the web, but the same code base is getting an auth0 error in iOS (Cordova). To prevent sending a null origin, we… --- ## [CORS issue with React / graph.cool project on localhost](https://community.auth0.com/t/cors-issue-with-react-graph-cool-project-on-localhost/8397)
**Author:** [@maxim.zubarev](https://community.auth0.com/u/maxim.zubarev)\ **Replies:** 4\ **Last updated:** [January 4, 2018, 11:14pm UTC](https://community.auth0.com/t/cors-issue-with-react-graph-cool-project-on-localhost/8397 "2018-01-04T23:14:33Z")
I am trying to get auth0 working in my local project. I googled the CORS issue and it seems you have to enable the proper URLs in the auth0 client settings, which I did though. It seems I keep overseeing something. Pleas… --- ## [CORS suddenly doesn't work?](https://community.auth0.com/t/cors-suddenly-doesnt-work/8800)
**Author:** [@j.lindsay](https://community.auth0.com/u/j.lindsay)\ **Replies:** 2\ **Last updated:** [November 23, 2017, 3:46am UTC](https://community.auth0.com/t/cors-suddenly-doesnt-work/8800 "2017-11-23T03:46:34Z")
I have a production site that uses Auth0-lock. It has been working well for months. Today however, we came in, and despite no change to anything on my end, started getting CORS rejections for every login. I have the req… --- ## [Auth0 third party cookie and CORS](https://community.auth0.com/t/auth0-third-party-cookie-and-cors/8786)
**Author:** [@simone.casciaroli](https://community.auth0.com/u/simone.casciaroli)\ **Replies:** 1\ **Last updated:** [November 21, 2017, 7:02pm UTC](https://community.auth0.com/t/auth0-third-party-cookie-and-cors/8786 "2017-11-21T19:02:58Z")
Just to double check that I understood this correctly (I’m so surprised that I want to double check). Reading this Cross-Origin Authentication - Auth0 Docs I understood that the only way to allow any user to authenticat… --- ## [Jwt Auth with Angular Auth0 and AspNetCore No 'Access-Control-Allow-Origin' header is present on the requested resource](https://community.auth0.com/t/jwt-auth-with-angular-auth0-and-aspnetcore-no-access-control-allow-origin-header-is-present-on-the-requested-resource/7558)
**Author:** [@yves.schelpe](https://community.auth0.com/u/yves.schelpe)\ **Replies:** 3\ **Last updated:** [July 27, 2017, 11:55pm UTC](https://community.auth0.com/t/jwt-auth-with-angular-auth0-and-aspnetcore-no-access-control-allow-origin-header-is-present-on-the-requested-resource/7558 "2017-07-27T23:55:36Z")
I’m getting the following error on my WebAPI requests: XMLHttpRequest cannot load https://localhost:44351/api/values/. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localho…