We are using the client side embed option to embed a JSS app under a page in our portal. This portal is built on Sitecore and uses the standard username/password Forms Authentication setup. I am using the sample EmbeddedWizard JSS app as per https://jss.sitecore.com/docs/techniques/mvc-integration/client-side-embedding#client-side-embedding
I can get it working on website where you don't have to login, but I can't seem to get it working on an authenticated website.
I checked the ApiKey,
CORS Origins = * , AllowedControllers = *
But still see error like
Access to XMLHttpRequest at 'https://jss.mysc.local/sitecore/service/noaccess.aspx?item=/sitecore/content/Applications/WebEdit/Ribbons/WebEdit&site=website&user=u_1900000' (redirected from 'https://jss.mysc.local/sitecore/api/layout/render/jss?item=%2FEmbeddedWizard%2FWizard&sc_apikey=%7B6A43BA10-D074-4BC9-AF8B-A9BC2AA35713%7D') from origin 'https://portal.mysc.local' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
u_1900000 is the username I logged in with.
Network XHR tab shows a request made to
with a 302 response to
Checked related issue on Error when trying to configure JSS connected Demo but no solution given.
Any help would be appreciated.