Access to XMLHttpRequest has been blocked by CORS policy during configuring of JWT authorization

Vasyl — Sat, 16 Nov 2024 03:00:20 GMT

Hello, we are trying to configure JWT access to Qlik Sense single app based in iframes on our application pages.

I created a JWT virtual proxy and it works fine if manually add proper header to request.

But when trying to access the Qlik sense on our application pages using JWT it returns:

Access to XMLHttpRequest at 'https://<ourQlikHubLink>' from origin 'https://<ourAppLink>' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: Redirect is not allowed

I added our app URL to "Access-Control-Allow-Origin" and added it to WhiteList as described here -https://support.qlik.com/articles/000061992

But still we see this error about access

Re: Access to XMLHttpRequest has been blocked by CORS policy during configuring of JWT authorization

Andre_Sostizzo — Tue, 24 Mar 2020 22:08:33 GMT

@Vasyl, is the developed portal application sending the requests to http and relying on Qlik Sense's redirect to https? Or perhaps there's a reverse proxy in between and/or an alias is being used for Qlik Sense instead?

Some reference to related content:

https://support.qlik.com/articles/000038606

topic Access to XMLHttpRequest has been blocked by CORS policy during configuring of JWT authorization in Management & Governance

Access to XMLHttpRequest has been blocked by CORS policy during configuring of JWT authorization

Re: Access to XMLHttpRequest has been blocked by CORS policy during configuring of JWT authorization