Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

rlesage — Mon, 15 Jan 2024 18:28:56 GMT

Hi,

I am embedding Qlik Cloud within an azure web app. I have used the tutorial from qlik.dev on session cookie proxies. https://qlik.dev/authenticate/jwt/jwt-proxy/quickstart-qlik-jwt-proxy/

Unfortunately, after succesfully logging in via the third party authentication tool, I get this error:

Access to XMLHttpRequest at 'https://xxx.region.qlikcloud.com/resources/autogenerated/product-info.json' (redirected from 'https://webapp.azurewebsites.net/resources/autogenerated/product-info.json') from origin 'https://webapp.azurewebsites.net' has been blocked by CORS policy

The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

This is my setCors function

function setCors(res) { res.set('Access-Control-Allow-Origin', frontendUri) res.header('Access-Control-Allow-Origin', frontendUri) res.header('Access-Control-Allow-Credentials', 'true') res.set('Access-Control-Allow-Methods', 'GET, OPTIONS') res.set('Access-Control-Allow-Headers', 'Content-Type, x-proxy-session-id') res.set('Access-Control-Allow-Credentials', 'true') res.header('Access-Control-Allow-Credentials', 'true') }

Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

jprdonnelly — Tue, 16 Jan 2024 18:40:18 GMT

@rlesage - have you also created a Web Integration in your Qlik Cloud Console and set the appropriate Content Security Policy?

Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

Ray_Strother — Tue, 16 Jan 2024 18:50:19 GMT

The below link may also help:

Mixed Content and CORS error for Access-Control-Al... - Qlik Community - 1715904

Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

rlesage — Wed, 17 Jan 2024 07:09:03 GMT

Hi,
Yes I have done that.
Thanks anyway!

topic Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy in Integration, Extension & APIs

Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy

Re: Qlik Session Cookie proxy embedding: Access to XMLHttpRequest has been blocked by CORS policy