Domain Not Authorized?

We’ve been getting a “Domain Not Authorized” error message on a domain we have set up to host an 8th Wall AR experience on our own servers. Any idea how to fix this?

Domain Not Authorized
AppKey=XXXXXXXX
Domain=

Hello!

Based on the error message, it seems that there is a configuration issue on your web server. The Domain= line should be displaying the domain/IP of your web server. In this case, the value is blank.

This generally indicates that the Referrer Policy of your web server config is too restrictive.

To verify, if you open up the Safari/Chrome debugger and inspect Network requests, I expect you’ll see that the “Referrer” request header is missing from the xrweb request.

Working example: you should see something like this:

The highlighted Referrer value should match the domain/subdomain that you have white-listed for your project.

If you look at the xrweb network request in your case, I expect you’ll see that the Referrer header is missing. This could happen if the Referrer-Policy is set to no-referrer, same-origin or other values that omit the Referer header. Generally you want something like strict-origin-when-cross-origin (default)

Please refer to Referrer-Policy - HTTP | MDN for more details.

Misconfiguration example: referrer policy and missing referrer request header:

Hope this helps!

1 Like

Please also refer to Domain Not Authorized | 8th Wall in our docs. Thanks!

1 Like

Oh okay. I’ll try this!

1 Like