ajax - CORS request made for path from origin but rejected because invalid CORS path -


i have asp.net web forms website (localhost:44355) using owin middleware , identity server 3 (localhost:44325) authentication. website configured implicit flow. on user first browsing site, redirects idsrv login page, authenticates , returns main website user claims - great far. pages make use of ajax updatepanel.

if user session times out , user clicks on control outside update panel, redirects idsrv login page, authenticates , returns correctly. perfect.

if, however, user session times out , user clicks on control inside update panel, no redirect takes place. user appears nothing has happened. (note: full page refresh correctly redirect user idsrv login page).

at identity server following log:

[information] cors request made path: "/connect/authorize" origin: "https://localhost:44355" rejected because invalid cors path

i have done lot of investigation , tried lot of things:

  1. at idsrv, use defaultcorspolicyservice allowall = true.
  2. at idsrv, implement icorspolicyservice isoriginallowedasync() returns true.
  3. at wesbsite, intercept owin redirecttoidentityprovider method, , try remove "x-requested-with", "x-microsoftajax" , "origin" headers.

none of these have been successful (edge, chrome , firefox behave same). has got more ideas?


Comments

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

jquery - Responsive Navbar with Sub Navbar -