Json feed blocked by CORS policy because of saml redirect

  • Is there a way to tell OneLogin to ignore json (or rss) feed urls? We have a feed at https://our_site_url/feed/announcements. We set up a page on our intranet to consume that feed and display the results, with links back to the appropriate WordPress page(s). It works fine on our local dev boxes, but on our test server we get CORS errors. (We don’t have OneLogin enabled on our local boxes, we log in via the ?normal flag.)

    The CORS error is: ...Response to preflight request doesn't pass access control check: Redirect is not allowed for a preflight request

    Looking at the response headers location value, it’s trying to redirect from the login server, which is why we’re getting the CORS error.

    Is there a way to tell OneLogin to ignore /feed/*?

  • The topic ‘Json feed blocked by CORS policy because of saml redirect’ is closed to new replies.