salmon-ice-67377
03/08/2023, 8:13 AMnumerous-umbrella-61726
03/08/2023, 9:29 AMsalmon-ice-67377
03/08/2023, 11:35 AMoathkeeper:
config:
serve:
proxy:
cors:
enabled: true
allowed_origins:
- "https://*.<http://abc.in|abc.in>"
- "https://*.<http://xyz.in|xyz.in>"
exposed_headers:
- Set-Cookie
allow_credentials: true
debug: true
access_rules:
repositories:
- <https://storage.googleapis.com/abc/oathkeeper/access-rules/abc-server.json>
- <https://storage.googleapis.com/abc/oathkeeper/access-rules/xyz-web.json>
errors:
authenticators:
cookie_session:
enabled: true
config:
check_session_url: <http://kratos-public.abc.in/sessions/whoami>
preserve_path: true
extra_from: "@this"
subject_from: "identity.id"
only:
- ory_kratos_session
noop:
enabled: true
We are getting cors issue while accessing domain https://*.<http://xyz.in|xyz.in>
but not for https://*.<http://abc.in|abc.in>
.
And we had different access rules for two domains.