OIDC Plugin - CORS Preflight Did Not Succeed at OPTIONS request on userinfo_endpoint

[Henri Mikkonen]

Hi Rene,

The plugin doesn't currently have any configuration options for this, so you need to modify web.xml to include desired CORS headers to the desired endpoints. The location from which the Javascript is performing the preflight request should be included in allowed origins.

There're existing filters for Jetty [1] and Tomcat [2].

[1] https://www.eclipse.org/jetty/javadoc/jetty-9/org/eclipse/jetty/servlets/CrossOriginFilter.html

[2] https://tomcat.apache.org/tomcat-9.0-doc/config/filter.html#CORS_Filter

BR,
Henri.

----- Original Message -----
From: "Rene Zeipelt" <zeipelt at uni-wuppertal.de>
To: dev at shibboleth.net
Sent: Wednesday, 8 December, 2021 13:28:39
Subject: OIDC Plugin - CORS Preflight Did Not Succeed at OPTIONS request on userinfo_endpoint

Hello,
is the OIDC plugin supporting CORS for the userinfo endpoint? We stuck 
on an "forbidden" error for a OPTIONS request on 
"/idp/profile/oidc/userinfo" (with the angular-oauth2-oidc lib). Thanks 
for any help.
Best regards
Rene Zeipelt

-- 
_________________________________________________________

BERGISCHE UNIVERSITÄT WUPPERTAL
Zentrum fuer Informations- und Medienverarbeitung - ZIM

Gaussstr. 20
DEU-42119 Wuppertal

room  : P.06.09
phone : +49 202 439 2236
fax   : +49 202 439 2910
e-mail: zeipelt at uni-wuppertal.de
_________________________________________________________


-- 
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net