# Access Type:"Confidential" throwing Cros Policy issue in angular9 using Oauth2 Odic configuration

**URL:** <https://forum.keycloak.org/t/access-type-confidential-throwing-cros-policy-issue-in-angular9-using-oauth2-odic-configuration/6603>\
**Category:** Securing applications\
**Tags:** admin-console, authentication, oidc\
**Created:** [December 31, 2020, 10:41am UTC](https://forum.keycloak.org/t/access-type-confidential-throwing-cros-policy-issue-in-angular9-using-oauth2-odic-configuration/6603 "2020-12-31T10:41:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mathew](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@mathew](https://forum.keycloak.org/u/mathew)\
**Post date:** [December 31, 2020, 10:41am UTC](https://forum.keycloak.org/t/access-type-confidential-throwing-cros-policy-issue-in-angular9-using-oauth2-odic-configuration/6603/1 "2020-12-31T10:41:41Z")

</div>

Angular 9 appliction throwing cross policy error after keyclaok user logins sucess, if we change to Access Type:“_Public_” to “ **Confidential** ” in keyclaok admin console.

Here i am useing “ **angular-oauth2-oidc** ” npm package for UI application configuration

> **[angular-oauth2-oidc](https://www.npmjs.com/package/angular-oauth2-oidc)**
>
> Support for OAuth 2 and OpenId Connect (OIDC) in Angular. Already prepared for the upcoming OAuth 2.1.. Latest version: 15.0.1, last published: a year ago. Start using angular-oauth2-oidc in your project by running \`npm i angular-oauth2-oidc\`. There...

 ![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/4/4959f7e21a1ce5d76974ab989d39afd535394d83.png)

 ![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/3/3394283aa00a947725b10e9053ce8856c737efa3.png)

please guide me what wrong i doing here.

---

<div class="post-metadata">

**Author:** ![jangaraj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jangaraj/32/5175_2.png) [@jangaraj](https://forum.keycloak.org/u/jangaraj)\
**Post date:** [December 31, 2020, 11:46am UTC](https://forum.keycloak.org/t/access-type-confidential-throwing-cros-policy-issue-in-angular9-using-oauth2-odic-configuration/6603/2 "2020-12-31T11:46:10Z")

</div>

Blind guess: Chrome + localhost = it can be a problem [https://stackoverflow.com/questions/10883211/deadly-cors-when-http-localhost-is-the-origin](https://stackoverflow.com/questions/10883211/deadly-cors-when-http-localhost-is-the-origin)