Does the CORS add-on for IIS have logging?

Question

Is there a log for the IIS CORS add-on module?

I have a customer that keeps getting 403 errors from the CORS module and swears they gave me the domains that requests are coming from. The standard IIS logs do not have an option for the "origin" field from the header. From my understanding, that is what the cors module looks for.

Erik

Answer 1

@Erik Martinson

You can use failed request tracking or Fiddler to view detailed request information about cors.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

The 403 is from the client rejecting the call, not IIS. IIS has no way to detect if the caller honors CORS, it just returns the CORS headers on every request.

that is, the browser compares the headers and generates the 403 error.