Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

<@U04UQ68083H> Is there any way around the limitation that OAuth2 apps cannot have `localhost:1234` as an allowed CORS origin? I realize it's a strange case, but I am building a dev tool that devs will use on their local machine, and I want them to sign into a local SPA via Ory Network and redirect back to localhost.

Sorry <@U084LQNEYNR>, I seem to be having a bit of trouble. Don't worry though, I've pinged my support folks and they will try to fix me up! :technologist:

Perhaps try again in 5mins?