zendesk/demo_apps

JWT with CORS?

rmpugh opened this issue · 3 comments

rmpugh commented

Hi there,

If I add "cors: true" to the sampleRequest in the demo, the {{jwt.token}} is not replaced with the actual token when hitting the server. Is there additional changes I have to make or is this expected behavior?

Many thanks,
Rob

sandlerr commented

Hi Rob,
This is expected behaviour. Adding cors: true means you aren't able to use secure settings for that request. CORS requests are made directly from the browser to the cross-origin destination without using our secure proxy. The secure proxy is required to interpolate the value of a secure setting. If you want to interpolate values into CORS requests, they need to be normal (non-secure) settings.

rmpugh commented

Hey sandlerr,

Many thanks for the quick response - and thanks for clearing that up - makes complete sense.

sandlerr commented

Not a problem. If you haven't already, you may also find help from checking out our community, developer portal or opening a ticket.

Best of luck developing your app!