AADSTS9002326: Cross-origin token redemption is permitted only for the 'Single-Page Application' about vipps-developers

[xXAvoraXx]

@cloveras

[xXAvoraXx]

When I search for this error on the internet, it is written that the problem has been resolved through the azure application.

https://issuehint.com/issue/Azure-Samples/ms-identity-javascript-angular-tutorial/37

[xXAvoraXx]

I could'nt solve this issue

[cloveras]

Hi @xXAvoraXx

Sorry for the late reply.

CORS is documented in our FAQ: https://github.com/vippsas/vipps-ecom-api/blob/master/vipps-ecom-api-faq.md#why-do-i-get-a-cors-error

---

Why do I get a CORS error?

If you get a CORS (Cross-Origin Resource Sharing) error, it is from your side, not an error from Vipps. You are most likely attempting to call the Vipps API from a website, and your webserver's configuration prevents it.

CORS is a protocol that enables scripts running on a browser client to interact with resources from a different origin. Sometimes servers are configured to prevent this, and that results in a CORS error.

Vipps only receives the API requests over HTTPS, and has no way of detecting how the request was made on the caller side - it all looks the same. We can not fix the CORS error for you.

You can read more about CORS here: CORS Tutorial: A Guide to Cross-Origin Resource Sharing.