Using API v1? See what changes in v2, or the v1 docs
AUTH_ORIGIN_NOT_ALLOWED
The request's origin is not in the app's allowed origins.
HTTP status: 403. Retrying the same request returns the same error.
What to do
Add the exact origin, including scheme, host and port, to the app's allowed origins.
Hint returned with the error: Add the site's origin to the app's allowed origins in the dashboard.
Why it happens
- A new domain or port that has not been added to the app yet
- A scheme or subdomain mismatch (
httpandhttps, orwwwand nowww, are different origins)
Endpoints that return it
- Get the consent URL (popup mode)
POST /v2/connect/authorize - Complete a connection
POST /v2/connect/complete - Get connect widget details
POST /v2/connect/info - Create a connect session
POST /v2/connect/sessions