Engel
04/24/2023, 7:40 PM"*"
but that leads to errors about Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is '*'
. And the docs say to add the origin location, but I think I want to allow login from the wider world of clients. Or do I need to rewrite the origin of the request in the API gateway level? Or maybe I'm missing something obvious. Thanks and sorry this is long!Session.init({ tokenTransferMethod: 'header', autoAddCredentials: false }
but we'll see if that works!rp
04/25/2023, 6:35 AMEngel
04/26/2023, 3:26 PM