Cannot set Access-Control-Allow-Credentials to True

Zero Trust Access
1

No matter what I do, this UI in CloudFlare Teams is throwing an error if I try to set Access-Control-Allow-Credentials to True. The error thrown is “Error configuring your application: access.api.error.invalid_cors_origins” which appears to be because it wants something for Origins, but the field now blanks out when enabling Allow-Credentials.

image
image2184×844 53.5 KB

1 Like
2

This is by design as setting as setting Access-Control-Allow-Origin would prohibit Access-Control-Allow-Credentials from using credentials. From https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials:

The CORS request was attempted with the credentials flag set, but the server is configured using the wildcard ( "*" ) as the value of Access-Control-Allow-Origin , which doesn’t allow the use of credentials.

3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.