question

Frank Giuffrida avatar image
Frank Giuffrida asked

Allowed Origins not working without full path to p11.secure.hostingprod

I currently host my site at Yahoo. My ssl files are in a directory addressed like this: https://www.wombat.com/ssl/. That address resolves to https: //p11.secure.hostingprod.com/@wombat.com//ssl/ in my browser. Allowed Origins https://www.wombat.com https://wombat.com https://p11.secure.hostingprod.com The allowed origins would not work on my site until I included the last line, which happens to be where my site is apparently located at the moment. Can anyone tell me how to get this working without a hostingprod in my URL? Is this a known issue?
alexa voice service
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

swasey@amazon avatar image
swasey@amazon answered
This appears to be something you'll want to contact Yahoo! about, since we can't control their hosting setup. All LWA cares about is what the browser "sees" as the Origin, which is the current protocol, domain, and port ( https://p11.secure.hostingprod.com in this case). This is because browsers restrict Javascript requests from being cross-domain unless the domain in question (LWA in this situation) allows the cross-domain request from your domain, which is why a specific request for that information requests. Once you fix your Yahoo! setup so that you can access that page from https://www.wombat.com/ssl then it'll also work, but again, that's a Yahoo! specific question. If you continue to have problems once you've sorted the issue with Yahoo! please comment back and we'll work on resolving it.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.