Discourse connect SSO Allow-Origin header missing

Hi, I have Discourse Connect enabled on my site, DISCOURSE_ENABLE_CORS set to true, and I have my allowed origin set.
You can see in the following screenshots that the preflight request properly includes the Allow-Origin header with the correct domain defined, however the actual PUT request fails because it’s missing the same header. Whats going wrong here?


Possibly unrelated to your issue, but what path are you making a PUT request to? DiscourseConnect is expecting GET requests. That might be why you’re getting the 404 response.

2 Likes

I was handling it with a simple 302 redirect, I wasn’t making a PUT request at all which is confusing. I decided to handle it on the client side after authenticating rather than making the redirect in PHP and that seems to have worked. Thanks for the help

2 Likes