CORS error persists in oAuth even after setting header

[BarryCarlyon]

Because it seems you are not redirecting the user to Twitch.

You seem to be using a lib to fetch the URL instead of redirecting.

It may also be a bug with passport since you are using passport

here is a “more simple” example

@nischal_dutt

I have tried setting up header as well as tried using the proxy server but still the CORS error occurs.

Error: Access to XMLHttpRequest at 'https://www.twitch.tv/login?client_id=myclientId&edirect_ur=http://localhost:3001auth/twitch/callback&response_type=code&state%3DQBENkeXou6FJKTSntHiK7H1z' (redirected from 'http://localhost:3001/auth/twitch/callback') from origin 'http://localhost:3000' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

You have a / missing as the redirect URL is invalid a missing / between 3000 and auth

@nischal_dutt

ntId&edirect_ur=htt

This section is also wrong.

You’ve got a load of weirdness going on here. And I don’t know if the issue is with PassportJS or something you have done.

Getting OAuth Access Tokens

For User oAuth authentication

1. Generate a URL with scopes/etc as needed using response_type=code
2. Display that URL to the user in the web browser or redirect them to that URL
3. They will accept/decline the authorisation
4. They come back with a code exchange the code for an access token/refresh token key pair

@nischal_dutt

Accept: “application/vnd.twitchtv.v5+json”,

You don’t need the kraken v5 header with helix