# Getting CORS error when using social login

**URL:** <https://forum.mautic.org/t/getting-cors-error-when-using-social-login/13801>\
**Category:** Product Support\
**Created:** [April 6, 2020, 2:39pm UTC](https://forum.mautic.org/t/getting-cors-error-when-using-social-login/13801 "2020-04-06T14:39:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![EdwardC](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/edwardc/32/693_2.png) [@EdwardC](https://forum.mautic.org/u/EdwardC)\
**Post date:** [April 6, 2020, 2:39pm UTC](https://forum.mautic.org/t/getting-cors-error-when-using-social-login/13801/1 "2020-04-06T14:39:09Z")

</div>

**Your software**  
My Mautic version is: 2.15.3  
My PHP version is: PHP Version 7.2.24-1+ubuntu18.04.1+deb.sury.org+1

**Your problem**  
If i use just email to register a form everything is fine. But when i use social login i get

```
app.js?vbfd772b4:237 Uncaught DOMException: Blocked a frame with origin "https://marketing.domain.com" from accessing a cross-origin frame.
        at HTMLDocument.<anonymous> (https://marketing.domain.com/media/js/app.js?vbfd772b4:237:347)
        at fire (https://marketing.domain.com/media/js/libraries.js?vbfd772b4:328:299)
        at Object.fireWith [as resolveWith] (https://marketing.domain.com/media/js/libraries.js?vbfd772b4:333:198)
        at Function.ready (https://marketing.domain.com/media/js/libraries.js?vbfd772b4:340:11)
        at HTMLDocument.completed (https://marketing.domain.com/media/js/libraries.js?vbfd772b4:340:291)

```

I do not have CORS enabled, and besides, if it were CORS then the email one would fail also correct?

---

<div class="post-metadata">

**Author:** ![silavapi](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/silavapi/32/7424_2.png) [@silavapi](https://forum.mautic.org/u/silavapi)\
**Post date:** [April 6, 2020, 2:41pm UTC](https://forum.mautic.org/t/getting-cors-error-when-using-social-login/13801/2 "2020-04-06T14:41:05Z")

</div>

Have you added this domain in the application you’re using for the social login? Often they require you to explicitly state the domains on which you can use their applications, and it must be exact (e.g. https/non https, www/non-www).

---

<div class="post-metadata">

**Author:** ![EdwardC](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/edwardc/32/693_2.png) [@EdwardC](https://forum.mautic.org/u/EdwardC)\
**Post date:** [April 6, 2020, 2:43pm UTC](https://forum.mautic.org/t/getting-cors-error-when-using-social-login/13801/3 "2020-04-06T14:43:56Z")

</div>

Im using Facebook social login… there is just domain without option for https or http. For the Valid OAuth Redirect URIs im using exactly with https as well.

Even weirder, my developer can get forwarded fine to the redirect url but not me. I tried another machine, similar issue.