qvest-digital / loginsrv

JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
MIT License
1.92k stars 148 forks source link

CORS issue for local dev #187

Open deltawi opened 3 years ago

deltawi commented 3 years ago

Hi all,

I am trying to use the loginsrv on my local machine. My frontend is calling the API using localhost but I get :

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://localhost:8090/login

The login works in command line: curl --data "username=a@b.c&password=azerty" 127.0.0.1:8090/login eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJhQGIuYyIsIm9yaWdpbiI6InNpbXBsZSIsImV4cCI6MTYyMTg1NjE1Mn0.U9uut1eHE2C1aHYW6Z00wAl8WLe0Xvy1nacSlAf2Pr3A8jh29ecNgjAB5ipHbpuit_30YRROALYCHZnsA2xnsw

I've been reading about the CORS issue, and it says that the response header should contain Access-Control-Allow-Origin = http://localhost:4200 but I don't know where I can configure that ?