CORS Error When Using LDAP Login Behind Apache2

Problem

When users attempt to log in to IDE Services with LDAP authentication behind an Apache2 reverse proxy encounter a 403 Forbidden error. The server logs indicate a CORS (Cross-Origin Resource Sharing) issue.

Server Log Error:

Mar 18 11:02:59 dev tbe-launcher[62380]: {"@timestamp":"2026-03-18T10:02:59.373482946Z","level":"DEBUG","logger":"org.springframework.web.cors.reactive.DefaultCorsProcessor","thread":"reactor-http-epoll-4","message":"Reject: 'https://test.com' origin is not allowed"}

Cause

The domain https://test.com is not present in the server’s CORS allowlist. This configuration restricts the server from accepting requests from the specified origin, resulting in the login failure.

Resolution

To resolve this issue, update the .yaml configuration file of IDE Services to include https://test.com in the allowed origins.

Steps to Resolve:

1. Open the server's .yaml configuration file.

2. Add the domain to the allowed-origins section:

   tbe:
     deployment:
       allowed-origins:
         - https://test.com
   

3. Save the changes and restart the IDE Services server.

References

For detailed information on configuring allowed origins, refer to the official JetBrains documentation: https://www.jetbrains.com/help/ide-services/set-up-server.html#tbe_deployment