# Embed Visualizations with authentication: CORS and preflight

**URL:** <https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053>\
**Category:** Kibana\
**Created:** [August 6, 2019, 4:14pm UTC](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053 "2019-08-06T16:14:34Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![apiras](https://avatars.discourse-cdn.com/v4/letter/a/977dab/32.png) [@apiras](https://discuss.elastic.co/u/apiras)\
**Post date:** [August 7, 2019, 9:14am UTC](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053/4 "2019-08-07T09:14:46Z")

</div>

Again, I added `server.cors.origin: ['*']` in kibana.yml but it doesn't solve.

The solution in [Login API CORS issue with localhost](https://discuss.elastic.co/t/login-api-cors-issue-with-localhost/94528/) is not fine for Kibana 7.2.0. Probably now the file to modify could be /usr/share/kibana/src/core/server/http/http\_config.js ...

---

_[View the full topic](https://discuss.elastic.co/t/embed-visualizations-with-authentication-cors-and-preflight/194053)._