I am building an application which will host multiple subdomains. This application allows communities to register their site and login via the central authentication system:
So, for instance:
Central Site: domain.com
Other Site: bobs-community.com
Another Site: freds-community.com
I believe I have CORS figured out, having set trustedOrigins to a function that validates the host against currently registered sites. However, on login I get a "Error Code: state_mismatch" error after the login has returned from a social provider.
Any tips? Happy to provide more information as required.