Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

User authentication with CORS and headers?

See original GitHub issue

I’m trying to connect to a privat channel here. My API, which also handles the authorization for the private channels as descripbed in the docs, lives under a different domain (api.example.com) while the frontend lives under example.com.

The API authorizes requests using JWT, so each request to the API needs to have an Authorization header. The problem is: if I’m using authTransport: jsonp to make CORS work, I get the console message Warn : To send headers with the auth request, you must use AJAX, rather than JSONP.

If I use the authTransport: ajax setting, I should be able to send the headers, but authorization fails due to this transport not supporting CORS.

Is there a way to get around this limitations?

Issue Analytics

State:
Created 7 years ago
Comments:5 (1 by maintainers)

Top GitHub Comments

1reaction

Nischal-shresthacommented, Mar 19, 2019

I have the same exact issue right now. Is there a way to overcome this limitation yet? I see that this feature request is more than 2 years old.

0reactions

Mentat-Radnorcommented, Sep 27, 2021

I didn’t find the right answer

Top Results From Across the Web

Which CORS headers do you need to send an Authorization ...

The Authorization HTTP header provides authentication information on a request. There are several types of authentication that use this ...

Cross-Origin Resource Sharing (CORS) - MDN Web Docs

Cross-Origin Resource Sharing (CORS) is an HTTP-header based mechanism that allows a server to indicate any origins (domain, scheme, ...

How do I send a CORS request with Credentials? - ReqBin

To send a CORS request with credentials, you must provide an Origin request HTTP header and an authorization cookie. CORS (Cross-Origin Resource ...

How to Authenticate Users and Implement CORS in Node.js ...

CORS is an HTTP header-based system that allows a server to specify any other origins (domain, scheme, or port) from which a browser...

CORS and the Access-Control-Allow-Origin response header

The CORS specification identifies a collection of protocol headers of which Access-Control-Allow-Origin is the most significant. This header is returned by a ...