Skip to content

CORS error when logos are hosted elsewhere #21113

@Profecy

Description

@Profecy

Describe the bug

We have authentik configured in HA, so we use a different host for serving things like backgournds, logos, etc.

Now hen a user logs in to the user portal via auth.brand1.com, the logo images for the applications display normally, because they are hosted at static.brand1.com.

When a user now login via a different brand, auth.brand2.com the logos in the user portal are not displayed because of CORS errors, since they are hosted at static.brand1.com.

How can this be rectified?

How to reproduce

Host logos outside of authentik.
Set logo for application to URLS that is same domain as Brand 1
Login to Brand2
No logos are displayed becasue of CORS errors.

Expected behavior

I would expect the logos to be displayed correctly.

Screenshots

Image Image

Additional context

No response

Deployment Method

Docker

Version

2025.10.2

Relevant log output

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingtriageAdd this label to issues that need to be triaged

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions