Cross-origin Authentication(CORS) Does Not Work when Third-Party Cookies are Disabled in Microsoft Edge
Last Updated:
Overview
Cross-Origin Resource Sharing (CORS) was configured based on the available documentation - Configure Cross-Origin Resource Sharing
When testing in Microsoft Edge under Block third-party cookies mode, cross-origin authentication does not work.
Applies To
- Cross-Origin Resource Sharing (CORS)
Cause
The cross-origin verification page provides a fallback for browsers with third-party cookies disabled. As of today, it only works with IE, as newer, Chromium-based Edge browsers are sandboxing cookies and local storage. Hence, the verification page code fails as it cannot get the verifier key at runtime
Solution
The Auth0 documentation has been updated to remove Edge as a supported browser for the verification page fallback.
Auth0 does not recommend using cross-origin flows in general. The Universal Login should be leveraged whenever possible.
