ministryofjustice/analytics-platform

App login using emailed *code* gives error

Closed this issue · 1 comments

What happened?

When I try to login to an app using a code, e.g. https://kpi-s3-proxy.apps.alpha.mojanalytics.xyz/login?method=code when I type in the code I get this error:
screen shot 2019-02-19 at 14 02 40

In Auth0 logs it says:

Failed by CORS
Origin https://kpi-s3-proxy.apps.alpha.mojanalytics.xyz is not allowed. Behavior used for check: WEB ORIGIN

Auth0 docs say:

For security purposes, you must add your app's origin URL to the list of Allowed Origins (CORS) in your app's Settings Section of the Dashboard, unless this origin URL has been already added to the Allowed callback URLs list.

Currently set to:

Allowed Origins (CORS) = https://kpi-s3-proxy.apps.alpha.mojanalytics.xyz

Not sure why this isn't accepted