community-edition-setup
community-edition-setup copied to clipboard
Invalid CORS requests from iOS devices (using OIDC)
Hi,
-> Webkit-based devices on iOS are failing to perform single sign on but its working fine with desktop browser.
-> Its fail while calling the 'https://gluu_host/oxauth/restv1/authorize' end point.
-> While debug its found that its cors issue
-> [org.gluu.oxserver.filters.AbstractCorsFilter] (AbstractCorsFilter.java:377) - Invalid CORS request; Origin=https://sso.first.org;Method=GET
-> Safari is probably appending the ;Method=GET in the HTTP Origin header and the java filter fails for a request from the same domain.