cognito hosted ui logout failing with

Question

Hello   
I have a test web application with cognito hosted UI.  The login part works well and I can reach my index.html page after authenticating with cognito.  when i try to logout following the documentation for cognito it just says   
GET  https://myDomain.auth.REGION.amazoncognito.com/logout?client_id=MyClientID&redirect_uri=https://www.cnn.com&response_type=code  
  
when I do that, I get an error on chrome developer tools, that says   
Access to XMLHttpRequest at 'https://myCognito.auth.REGION.amazoncognito.com/logout?client_id=MyClientID&redirect_uri=https%3A%2F%2Fwww.cnn.com&response_type=code' from origin 'https://myDomain.REGION.amazonaws.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.  
how do I make sure the browser wont stop the logout request? as I recall cognito does not have any place were to configure CORS  
  
is there any other way to do a logout request?  
thanks  
RT

zachjonesnoel · Answer

Not sure if you really want the user to navigate to CNN.com or it is just a sample, if you are trying on the domain where you have access,  you can allow the requests from Cognito domain with "Access-Control-Allow-Origin".

jamess · Answer

Your call to the Cognito _/logout_ endpoint shouldn't be an XHR request -- the browser needs to be redirected to there. Cognito will then log the user out and redirect them back to the value you provided in _redirect_uri_.

rtt · Answer

I just realized it is not a cognito issue. The browser receives a 302 status and a location but it is not redirecting.  So cognito is doing its part, i just need to figure out the code to force the browser to redirect.

akakshar · Answer

Hey @rtt how did you solve this? I am having the exact same redirect issue with a 302, and cors error.

cognito hosted ui logout failing with

Relevant content