
JasonK.70501 (Customer) asked a question.
Above is a rough diagram of my project structure. It is 2 .net web apps, one hosts an api connected to a database, the other only hosts the SPA static files. Both web apps authenticate through Okta. I've listed the expected workflow above.
The issue that I'm having is when I go to the SPA and get redirected to Okta to log in, I get a CORS error when it redirects from Okta to my SPA.
If I make an API call to my web api app from the browser, it redirects me to Okta, then redirects me back to the API route and returns the response. I want this same workflow when I go to the SPA.

Hi, @JasonK.70501 (Customer)
Thank you for posting on our Community page!
I have done some research and found the below article that might help:
Basically, the error shows “If you didn't enable CORS, or your CORS configuration is incorrect, an error appears in your browser's developer tool or JavaScript console.”
Additionally, my advice would be to leverage the Okta Developer forums for this type of questions and take advantage of their expertise.
https://devforum.okta.com/
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________