New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Invalid CORS requests from iOS devices (using OIDC) #655

Open

MohitMaliFtechiz opened this issue Mar 30, 2020 · 0 comments

Collaborator

MohitMaliFtechiz commented Mar 30, 2020

Hi,

-> Webkit-based devices on iOS are failing to perform single sign on but its working fine with desktop browser.

-> Its fail while calling the 'https://gluu_host/oxauth/restv1/authorize' end point.

-> While debug its found that its cors issue

-> [org.gluu.oxserver.filters.AbstractCorsFilter] (AbstractCorsFilter.java:377) - Invalid CORS request; Origin=https://sso.first.org;Method=GET

-> Safari is probably appending the ;Method=GET in the HTTP Origin header and the java filter fails for a request from the same domain.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment