Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, I'm having trouble configuring CORS. Even though it says CORS is enabled in the Custom Domain settings, the identity config file shows `'/serve/public/cors/enabled=false'`

Enabling CORS through the CLI in the identity config doesn't work either. After enabling CORS in the config file it says the project is successfully updated, but CORS resets to disabled, which can be seen after fetching the config file again.

Any suggestions?

I don't know if it's related, but Ory Network UI says "your plan is restricted to 0 domains per project", even though it's a pro plan and I have a custom domain configured.

It's a staging project unlocked for free with a discount code after a special request, project id `955dd02d-080d-4f9d-bf69-56ebb60aaa36`

Hi <@U042ZNU9JTS>

CORS cannot be set on the underlying service, e.g. Kratos.

You can only enable CORS on your custom domain inside the Ory Console. <https://www.ory.sh/docs/guides/custom-domains>

I don't think we expose this through the CLI yet

Thanks, good to know! We've solved the CORS problem we were facing and it wasn't Ory config related.