search

DannyMoerkerke / whatpwacando.today

Repo to collect bugs for https://whatpwacando.today/
542 stars 7 forks source link

CORS breaking on auth demo #12

Closed daweimau closed 3 years ago

daweimau commented 3 years ago

Pressing "Register Credential" button at https://whatpwacando.today/authentication yeilds "Registration failed" popup message.

In console this presents as a CORS problem:

Access to fetch at 'https://api.whatpwacando.today/webauthn/registration-options' from origin 'https://whatpwacando.today' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

DannyMoerkerke commented 3 years ago

Thanks a lot for reporting! This was due to a misconfiguration in the backend and has now been fixed.

Thanks!