community-edition-setup icon indicating copy to clipboard operation
community-edition-setup copied to clipboard

Invalid CORS requests from iOS devices (using OIDC)

Open MohitMaliFtechiz opened this issue 4 years ago • 0 comments

Hi,

-> Webkit-based devices on iOS are failing to perform single sign on but its working fine with desktop browser.

-> Its fail while calling the 'https://gluu_host/oxauth/restv1/authorize' end point.

-> While debug its found that its cors issue

-> [org.gluu.oxserver.filters.AbstractCorsFilter] (AbstractCorsFilter.java:377) - Invalid CORS request; Origin=https://sso.first.org;Method=GET

-> Safari is probably appending the ;Method=GET in the HTTP Origin header and the java filter fails for a request from the same domain.

MohitMaliFtechiz avatar Mar 30 '20 05:03 MohitMaliFtechiz