implicit grant - Access-Control-Allow-Origin about oauth2orize HOT 4 CLOSED

Yes. The port in this case tells the browser that http://www.duo.sallespro.com.br:3000 & http://www.duo.sallespro.com.br do not reside in the same origin (See same origin restrictions)

You should only need to set the following header in the responses from http://www.duo.sallespro.com.br:3000 for any request containing the preflight cors request OPTIONS type : res.setHeader('Access-Control-Allow-Origin'', 'www.duo.sallespro.com.br')

from oauth2orize.

Thanks @jas for the reply! You'll need to enable CORS on your server to support this (see connect-cors). As always, please be aware of any security concerns if you choose to do this.

from oauth2orize.

No worries @jaredhanson, hope it helped @sallespromanager.

from oauth2orize.

hi @jas & @ @jaredhanson,

thank you for your initiatives building this code and the concerns.

what has really been helpful was to go deeper into the ( not so easy ) Oauth flows & mainly this repo with a very complete example.

https://github.com/FrankHassanabad/Oauth2orizeRecipes

i suggest to include in the wiki / readme files to have people jump start it.

the confusion is on which parameters should be included in the headers / in the req. parameters, and so forth...

from oauth2orize.