Forum Discussion

Johan_Lång's avatar
Johan_Lång
Icon for Cirrus rankCirrus
May 05, 2021

Cors preflight requests problem

I have two different web applications that make requests to domain names other than themselves. For example, x.domain.com makes a request to y.domain.com to retrieve certain data. The user is authent...
application delivery
BIG-IP Access Policy Manager (APM)
Johan_Lång's avatar
Johan_Lång
Icon for Cirrus rankCirrus

Hmm, not quite, I think.

 

Isnt it the client who makes the acctual call to the backend server, y.domain.com?

x.domain.com responds with a 302 to the client with a new location header and the client trying to make a new request to the new location?

 

In your scenario, x.domain.com makes the acctual request to y.domain.com in the back, right?

But if there is way to accomplish that instead, im in! :) but im not sure how to do that really..

 

Best regards,

Johan

AlexBCT's avatar
AlexBCT
Icon for Cumulonimbus rankCumulonimbus
May 22, 2021

Hi Johan,

 

Sounds like you are a step further at least! (just not with a working solution yet ;)

 

It sounds to me that there may be some entries missing from the Authentication Domains settings. Can you confirm that the Auth Domains tab looks similar to this one:

 

 

 

Also, in your reponse you mention a redirect to z.example.se - not sure if that is a typo and you mean z.example.COM or if this is a different domain, but either way ensure that this domain is also part of the Auth Domain list.

 

Let me know how you get on!