CORS question
-
Hey guys, I'm trying to configure the cors filter to allow all subdomains under my site, call it
example.com
.It seems that the only allowed values for "Allowed origins" are the wildcard and specific origins, is that right?
-
Looking at how the filter works, it looks like we either find
*
which allows all origins, or - we look for exact matches in the configuration based upon theOrigin
HTTP header.So you can't allow all subdomains in FusionAuth at this time.