# \#cors

**URL:** https://devforum.okta.com/tag/cors/9.md

[Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md)

---

## [Django django-okta-auth CORS issue](https://devforum.okta.com/t/django-django-okta-auth-cors-issue/34121)

<div class="topic-metadata">

**Author:** [@prashshyam](https://devforum.okta.com/u/prashshyam)\
**Replies:** 1\
**Last updated:** [August 15, 2025, 9:07pm UTC](https://devforum.okta.com/t/django-django-okta-auth-cors-issue/34121 "2025-08-15T21:07:48Z")

</div>

Hi, I am using follwing version of packages python 3.12 django 4.2.23 django-okta-auth==0.8.0 django-cors-headers==4.7.0 for my django web app.Now when I try to sign in using okta sign in widget I get Access to XMLHt…

---

## [Still facing cors error after adding into trusted source](https://devforum.okta.com/t/still-facing-cors-error-after-adding-into-trusted-source/29062)

<div class="topic-metadata">

**Author:** [@pranav.pakhale](https://devforum.okta.com/u/pranav.pakhale)\
**Replies:** 1\
**Last updated:** [July 5, 2024, 12:52pm UTC](https://devforum.okta.com/t/still-facing-cors-error-after-adding-into-trusted-source/29062 "2024-07-05T12:52:33Z")

</div>

We have configured SAML External Idp, while sending saml response to okta facing cors issue after adding origin uri in trusted origins. We are getting saml request from okta then we are calling okta’s end point with po…

---

## [Even after okta authentication, I am getting 403 Forbidden CORS error while calling api](https://devforum.okta.com/t/even-after-okta-authentication-i-am-getting-403-forbidden-cors-error-while-calling-api/26434)

<div class="topic-metadata">

**Author:** [@Saurabh\_B\_LTI](https://devforum.okta.com/u/Saurabh_B_LTI)\
**Replies:** 5\
**Last updated:** [January 22, 2024, 7:17pm UTC](https://devforum.okta.com/t/even-after-okta-authentication-i-am-getting-403-forbidden-cors-error-while-calling-api/26434 "2024-01-22T19:17:26Z")

</div>

Hi, I am using angular 11 app and have just set up okta authentication. I am not able to call even a single api after that. I am getting 403 Forbidden CORS error fir the api calls, which before okta integration were succ…

---

## [CORS error on AJAX call](https://devforum.okta.com/t/cors-error-on-ajax-call/23284)

<div class="topic-metadata">

**Author:** [@Anuradha](https://devforum.okta.com/u/Anuradha)\
**Replies:** 3\
**Last updated:** [May 1, 2023, 3:44pm UTC](https://devforum.okta.com/t/cors-error-on-ajax-call/23284 "2023-05-01T15:44:44Z")

</div>

@andrea @oktadev-blog Hi , I have integrated Okta in my .net application. I have few ajax calls to fill dropdowns. After keeping page idle for some time (okta session is expired or refresh link needs to be sent) , if…

---

## [CORS issue from FrontEnd App](https://devforum.okta.com/t/cors-issue-from-frontend-app/23057)

<div class="topic-metadata">

**Author:** [@fguzman](https://devforum.okta.com/u/fguzman)\
**Replies:** 5\
**Last updated:** [January 23, 2023, 10:56pm UTC](https://devforum.okta.com/t/cors-issue-from-frontend-app/23057 "2023-01-23T22:56:16Z")

</div>

Hello, I have a CORS issue when I send a post request from react app to get token of Resource owner password flow. Te request POST is https://dev-71630461.okta.com/oauth2/\*\*\*\*\*\*\*\*\*/v1/token and the react app is on http:…

---

## [Request header field authorization is not allowed by Access-Control-Allow-Headers in preflight response](https://devforum.okta.com/t/request-header-field-authorization-is-not-allowed-by-access-control-allow-headers-in-preflight-response/15305)

<div class="topic-metadata">

**Author:** [@RichardP](https://devforum.okta.com/u/RichardP)\
**Replies:** 8\
**Last updated:** [October 21, 2021, 3:50pm UTC](https://devforum.okta.com/t/request-header-field-authorization-is-not-allowed-by-access-control-allow-headers-in-preflight-response/15305 "2021-10-21T15:50:42Z")

</div>

I’ve got an API defined in Okta Workflows, and was planning on calling it from a SPA and passing in an Authorization Bearer {JWT created by a PKCE flow} to authenticate, but apparently the CORS response will not allow a…

---

## [CORS error encountered when Okta Signin Widget download security images from SPA running on http://localhost:3000](https://devforum.okta.com/t/cors-error-encountered-when-okta-signin-widget-download-security-images-from-spa-running-on-http-localhost-3000/7790)

<div class="topic-metadata">

**Author:** [@hliang](https://devforum.okta.com/u/hliang)\
**Replies:** 2\
**Last updated:** [January 29, 2020, 4:04pm UTC](https://devforum.okta.com/t/cors-error-encountered-when-okta-signin-widget-download-security-images-from-spa-running-on-http-localhost-3000/7790 "2020-01-29T16:04:18Z")

</div>

Hi, I’m running a react SPA on http://localhost:3000. When I turn on the feature of security image in the widget config, it attempts to download from https://{{my\_okta\_domain}}/login/getimage?username={{my\_username}}. I’…

---

## [Access to XMLHttpRequest has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource](https://devforum.okta.com/t/access-to-xmlhttprequest-has-been-blocked-by-cors-policy-no-access-control-allow-origin-header-is-present-on-the-requested-resource/5453)

<div class="topic-metadata">

**Author:** [@ArkasDev](https://devforum.okta.com/u/ArkasDev)\
**Replies:** 1\
**Last updated:** [June 25, 2019, 10:16am UTC](https://devforum.okta.com/t/access-to-xmlhttprequest-has-been-blocked-by-cors-policy-no-access-control-allow-origin-header-is-present-on-the-requested-resource/5453 "2019-06-25T10:16:44Z")

</div>

Hey guys, I’m trying to create an API for my web app. When I send an API call from my frontend to my backend, a cors error occurs. How can the cors problem be solved? I’ve read a lot of threads, but I haven’t made any pr…

---

## [Okta CORS Issue? Works Incognito doesn't work outside of Incognito?](https://devforum.okta.com/t/okta-cors-issue-works-incognito-doesnt-work-outside-of-incognito/3569)

<div class="topic-metadata">

**Author:** [@mkwyche](https://devforum.okta.com/u/mkwyche)\
**Replies:** 7\
**Last updated:** [December 12, 2018, 7:19pm UTC](https://devforum.okta.com/t/okta-cors-issue-works-incognito-doesnt-work-outside-of-incognito/3569 "2018-12-12T19:19:59Z")

</div>

Hi, I’m hoping someone can help me figure out why I have a CORS issue for one of my urls when I’m in a chrome. The odd this is that the login works just fine when I open up an incognito browser and try the same login. S…

---

## [CORS Warning: Create user without credentials (JS)](https://devforum.okta.com/t/cors-warning-create-user-without-credentials-js/3471)

<div class="topic-metadata">

**Author:** [@abroadhurst](https://devforum.okta.com/u/abroadhurst)\
**Replies:** 1\
**Last updated:** [November 29, 2018, 11:08am UTC](https://devforum.okta.com/t/cors-warning-create-user-without-credentials-js/3471 "2018-11-29T11:08:32Z")

</div>

Hi, I am currently receiving an issue with CORS warning appearing. I am attempting to create a user without credentials using the example code gather from postman. Although it works within postman it does not work with …

---

## [CORS issues when using multiple local apps (localhost:\<PORT\>) to hit the same dev okta account](https://devforum.okta.com/t/cors-issues-when-using-multiple-local-apps-localhost-port-to-hit-the-same-dev-okta-account/3113)

<div class="topic-metadata">

**Author:** [@charlieh](https://devforum.okta.com/u/charlieh)\
**Replies:** 4\
**Last updated:** [October 17, 2018, 11:45pm UTC](https://devforum.okta.com/t/cors-issues-when-using-multiple-local-apps-localhost-port-to-hit-the-same-dev-okta-account/3113 "2018-10-17T23:45:32Z")

</div>

I have a single Okta dev instance. I configured one front-end application to use it during local development @localhost:9000 and it worked great! Now I’m trying to set up a second front-end application @localhost:4000.…

---

## [CORS Problem Sign on widget](https://devforum.okta.com/t/cors-problem-sign-on-widget/2609)

<div class="topic-metadata">

**Author:** [@ramv7983](https://devforum.okta.com/u/ramv7983)\
**Replies:** 11\
**Last updated:** [September 14, 2018, 7:29pm UTC](https://devforum.okta.com/t/cors-problem-sign-on-widget/2609 "2018-09-14T19:29:53Z")

</div>

I am trying to use the sign on widget into our application and as part of POC I am building sample and simple app and faced the following problem in my browser Failed to load https://dev-931445.oktapreview.com/oauth2/de…

---

## [Okta React.js Client Screen is Blank after login with errors](https://devforum.okta.com/t/okta-react-js-client-screen-is-blank-after-login-with-errors/2203)

<div class="topic-metadata">

**Author:** [@will](https://devforum.okta.com/u/will)\
**Replies:** 4\
**Last updated:** [July 19, 2018, 7:30pm UTC](https://devforum.okta.com/t/okta-react-js-client-screen-is-blank-after-login-with-errors/2203 "2018-07-19T19:30:06Z")

</div>

Hi, so my react.js client I got from okta shows a blank screen after I authenticate (successfully). Looking for help on how to fix this. I would really appreciate any guidance! I have no previous experience using reac…

---

## [CORS issue with okta login widget](https://devforum.okta.com/t/cors-issue-with-okta-login-widget/2153)

<div class="topic-metadata">

**Author:** [@ummadi\_sudhakar](https://devforum.okta.com/u/ummadi_sudhakar)\
**Replies:** 3\
**Last updated:** [July 12, 2018, 8:19am UTC](https://devforum.okta.com/t/cors-issue-with-okta-login-widget/2153 "2018-07-12T08:19:04Z")

</div>

HI ,We are using okta login widget in our single page angular app but we are getting the below error.My single page app is deployed in ngnix server. I have a developer account set up.I have added the IP in the trusted or…

---

## [Manage Okta Resources - Implicit flow](https://devforum.okta.com/t/manage-okta-resources-implicit-flow/1910)

<div class="topic-metadata">

**Author:** [@dgsergio84](https://devforum.okta.com/u/dgsergio84)\
**Replies:** 3\
**Last updated:** [June 5, 2018, 4:32pm UTC](https://devforum.okta.com/t/manage-okta-resources-implicit-flow/1910 "2018-06-05T16:32:50Z")

</div>

Hi, I’m sorry if I am not aware or have missed something. I’ve implemented an Implicit Flow, even the validation part. But I also need to manage Okta’s Users and Groups API. I have an API Token and it works perfectly, …

---

## [Where does the script for sessions go in the widget configuration?](https://devforum.okta.com/t/where-does-the-script-for-sessions-go-in-the-widget-configuration/830)

<div class="topic-metadata">

**Author:** [@sobopla](https://devforum.okta.com/u/sobopla)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 6:32pm UTC](https://devforum.okta.com/t/where-does-the-script-for-sessions-go-in-the-widget-configuration/830 "2017-12-01T18:32:48Z")

</div>

I’m following the Okta Authentication Quickstart Guides, on Okta Sign-In Widget. It says to ‘copy this widget configuration into your front-end application:’ and gives a script. what is it referring to as the front-end? …

---

## [Access control access origin" ERROR while get current user Api](https://devforum.okta.com/t/access-control-access-origin-error-while-get-current-user-api/441)

<div class="topic-metadata">

**Author:** [@arvi](https://devforum.okta.com/u/arvi)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 4:29pm UTC](https://devforum.okta.com/t/access-control-access-origin-error-while-get-current-user-api/441 "2017-09-06T16:29:07Z")

</div>

hello everyone i having difficulty while calling ‘get current user’ Api (api/v2/users/me) … it always ends up with “access control access origin” ERROR, i new to this i am using angular app to hit this api. i have used…
