Comments (2)
afeld
commented on August 25, 2024
Does that cause a problem? Didn't run into (or notice) this problem when working on #458.
from culper.
ryanhofdotgov
commented on August 25, 2024
If you have CORS_ALLOWED=* in your dev environment you probably won't see a problem, but if it is something like:
CORS_ALLOWED=http://web.eapp.local.test:8080;https://id.eapp.local.test:8443
then you are going to run into trouble if the browser doing the POST from the id.eapp.local.test context is not setting Origin.
My intuition is that once this issue gets deep-dived, the approach to single-sign on might have to be re-visited in order to get CORS set up properly – perhaps switching to one of the other SAML profiles or WSO2-supported protocols.
from culper.
Related Issues (20)
- U.S. citizen born abroad – FS-240 can not be issued in US HOT 1
- Use FormType and FormVersion in the /form meta section to switch form type HOT 2
- Question tracking document (engineering help guide) HOT 1
- Form state not cleared for FS240 place of issuance
- Street address fields should not accept P.O. Boxes
- Determine if all street fields prohibit P.O. boxes
- Employment telephone is required
- Employment supervisor telephone is required
- Education verifier telephone number is required
- Employment physical location telephone number is required
- Update login language to be generic for form type HOT 1
- Map out plan to move U.S. Passport from Foreign to Citizenship HOT 1
- Education reference name and email "I don't know" issue
- Applicant should see a message letting them know one of the two phone numbers is required for people who know you well
- Cross-validate passport number with required-ness of foreign born citizenship documentation
- "In the U.S." address has no country value by default
- Research and prototype PDF workflow for applicant HOT 1
- XML spec for new SF-85
- wiki logo and screenshots
- Try out eslint-plugin-compat HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from culper.