search

ministryofjustice / analytics-platform

Parent repository for the MOJ Analytics Platform
MIT License
14 stars 1 forks source link

App login using emailed *code* gives error #91

Closed davidread closed 1 year ago

davidread commented 5 years ago

What happened?

When I try to login to an app using a code, e.g. https://kpi-s3-proxy.apps.alpha.mojanalytics.xyz/login?method=code when I type in the code I get this error:

screen shot 2019-02-19 at 14 02 40

In Auth0 logs it says:

Failed by CORS
Origin https://kpi-s3-proxy.apps.alpha.mojanalytics.xyz is not allowed. Behavior used for check: WEB ORIGIN
davidread commented 5 years ago

Auth0 docs say:

For security purposes, you must add your app's origin URL to the list of Allowed Origins (CORS) in your app's Settings Section of the Dashboard, unless this origin URL has been already added to the Allowed callback URLs list.

Currently set to:

Allowed Origins (CORS) = https://kpi-s3-proxy.apps.alpha.mojanalytics.xyz

Not sure why this isn't accepted