SAP Knowledge Base Article - Preview

3212994 - How to fix CORS issue in Spartacus using Commerce 2105 and Newer


  • CORS error in browser console
  • Error in Commerce console logs:

java.lang.IllegalArgumentException: When allowCredentials is true, allowedOrigins cannot contain the special value "*" since that cannot be set on the "Access-Control-Allow-Origin" response header. To allow credentials to a set of origins, list them explicitly or consider using "allowedOriginPatterns" instead.



Commerce 2105 or Newer


SAP Commerce Cloud all versions


KBA , CEC-SPA , SAP Commerce Cloud Spartacus , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.