CORS while getting openid-configurations

[maryam]

Hi there,

We’ve encountered an issue with Okta’s social login feature. Specifically, when attempting to sign in with Microsoft, we’re receiving an error in the console stating:

“Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://xyz.abc.com/oauth2/default/.well-known/openid-configuration. (Reason: CORS request did not succeed). Status code: (null).”

Our React JS application integrates with Okta using the “okta-auth-js”: “5.4.0” library, and we’re seeing this problem on Firefox and Chrome browsers in the Windows operating system. This issue has recently surfaced for some users, although it previously worked without any problems. Can you suggest a solution to resolve this problem?

Thanks,

[sigama]

Hi @maryam! Can you confirm if you can access the OIDC public metadata url directly via your browser - Authorization servers | Okta Developer. This is mine for example https://semonav2.oktapreview.com/oauth2/default/.well-known/openid-configuration.

[maryam]

Hey @sigama,

Thank you for your reply. I figured out the issue. There were some security changes that caused the issue but it has been resolved now and social logins are working fine. Thank you!