I have enabled

oauth2.serve.public.cors

and add CORS origins to my oAuth2 credentials. The

/oauth2/token

endpoint still gives CORS errors. What else could I be doing wrong here 🤔

ory network or self managed?

Ory Network

have you configured cors on the oauth2 client as well?

Yes! Just with the domain and protocol

are you using a custom domain?

No custom domain for the Ory. We will have different frontend domains making a request to the same Ory instance

ok, i won’t have time to investigate today. with custom domains, it definitely should work when you set up cors. for hydra, it’s possible that there is some issue preventing the correct cors headers. is this blocking you right now? you could also use the ory tunnel as a workaround i think

It is blocking the Demo oAuth SPA which I am building to showcase Ory Hydra oAuth implement with custom page. I can use the Postman or some CLI to demo the Ory Hydra oAuth but it is not as cool as using a SPA 😛 What could I be missing here? Maybe I am doing something wrong?

It could be problem on our end, but we need to confirm that first

I see. Thanks. Please do let me know so I can resume the work on the demo 🙏

Could you please create an issue in ory/network where you explain what you tried and what didn’t work, plus if possible a reproducible path. For example using CURL or postman