CORS problem with Angular and Spring

Questions
#1

Okta, Spring Boot and Angular
Want to maintain okta authentication in spring boot and want to call API from angular. I have tried couple of options and none of them worked. Authentication flow is working fine when accessed API directly but not from angular. Domain added to trusted origins and enabled CORS as well.

How to solve this CORS error?

Access to XMLHttpRequest at 'https://dev-13097919.okta.com/oauth2/default/v1/authorize?response_type=code&client_id=0oa5oXXXXXX7i5d6&scope=profile%20email%20openid&state=GCENVmdPeFtQuZOU-P5bZgOWbAA7lPivKwlfVqo4cLc%3D&redirect_uri=http://localhost:8069/cab/authorization-code/callback&nonce=jGzEkEw8ErN5B_Re9kdpD-mAHgYLXn0zeYTe42X4hyU' (redirected from 'http://localhost:8069/cab/api/hello-world') from origin 'http://localhost:8069' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Network calls

CORS Error
CORS Error1584×572 140 KB

Console errors

CORS Error.jpeg
CORS Error.jpeg1581×613 45.7 KB

#2

Just to confirm, is http://localhost:8069 in your trusted origins? The error message indicates it is not.

#3

Yes, http://localhost:8069 is my trusted origin and added below code to allow cors
registry.addMapping("/**") .allowedOrigins("*") .allowedHeaders("*") .allowedMethods("*")

#4

You cannot make an AJAX request to the authorize endpoint, you MUST redirect to this endpoint instead, as noted in our documentation

#5

Thank you, do you have any blog or example for this scenario with jwt and custom authentication manager/provider?

#6

What do you mean by “custom authentication manager/provider?” Are you trying to use a custom authorization server? Or are you trying to do something else?