Description
External API calls fail unless listed in resourceServerURLs, even when SDK storage is not webWorker. This adds unnecessary work for developers, as resourceServerURLs is better kept optional for webWorker mode, where stricter restrictions make sense.
External APIs should work without listing them in resourceServerURLs when storage is not webWorker. The configuration should remain optional and primarily used for webWorker mode.
We need to rename resourceServerURLs to a more user-friendly term like allowedExternalUrls or webWorkerAPIs to clarify that it is optional and primarily relevant for webWorker mode.
Steps to Reproduce
- Configure the SDK with storage type
localStorage or sessionStorage.
- Call an external API not listed in
resourceServerURLs.
- Observe that the call fails.
Please select the area the issue is related to
@asgardeo/react
Version
0.6.12
Environment Details (with versions)
N/A
Reporter Checklist