Xero integration with angular-oauth2-oidc

[bwyyoung]

Dear All,

I am new to OAuth2. I am trying to integrate Xero with a web app that uses Angular for its front end, and Google Cloud / Firebase for its backend.

I saw this issue raised with regards to this library:
https://stackoverflow.com/questions/57579323/connecting-to-xero-oauth2-from-localhost-give-cors-erros

How do we perform a login via CODE FLOW for OAuth 2.0 with Angular?
Could you please share an example with me?

The closest example Xero provides is a NodeJS Project: https://github.com/XeroAPI/xero-node-oauth2-app

However, this currently does not fit with my tech stack.

What should I do?

[jeroenheijmans]

I don't think there is such an integration guide or tutorial around "Xero" with this library. At least, not within this repository or community. I'm afraid you (or someone else from the community) would be the one to provide it. I'm also not entirely sure if that broad a question ("how to integrate Xero with this lib") is a good fit for the issues list of this library?

In general though, there are the repo's sample and my personal sample that both demonstrate Code+PKCE flow. Hopefully that gives you enough of a start?

[bwyyoung]

Ok. However it seems that when trying to do the below steps:

  this.oauthService.initCodeFlow();
  this.oauthService.configure(authConfig);
  this.oauthService.loadDiscoveryDocumentAndTryLogin();

I get a CORS error: No 'Access-Control-Allow-Origin' header is present on the requested resource.

This is the same problem seen in Stack Overflow. Does angular-oauth2-oidc only work when the issuer has CORS enabled?

[jeroenheijmans]

Any resource from the Identity Server (Xero, in your case?) loaded in an application must either have proper CORS headers, or the Angular SPA must be served from the same domain.

So for example the openid-configuration (discovery) document does need to be served with CORS headers enabled if you're serving your app elsewhere.

This is more of a server side concern though, and I recommend asking on the Xero forums/community about it.

[jeroenheijmans]

Let us know if you ever figured it out, or link to the Xero forums post about this, so others may find it. (Given further radio silence will assume for now that things got resolved.)