[aerogear-dev] CORS: Help needed

[Daniel Bevenius]

I noticed that you are not setting "Access-Control-Allow-Credentials". I'm
not sure what the underlying JS is setting .withCredentials on the
XMLHttpRequest object, but if it is then this request would fail.




On 19 June 2013 12:03, Matthias Wessendorf <matzew at apache.org> wrote:

>
>
>
> On Wed, Jun 19, 2013 at 11:59 AM, Bruno Oliveira <bruno at abstractj.org>wrote:
>
>> Have you tried Resteasy mailing list?
>>
>
> that's next :-)
>
> I guess I wanted a second pair of eyes here :)
>
>
>
>>
>> Matthias Wessendorf wrote:
>> > Hi,
>> >
>> > trying to add CORS, to the Server (using RestEasy), I did this:
>> >
>> https://github.com/aerogear/aerogear-unified-push-server/commit/7ccb2e7fb
>> >
>> > (and some more variations.... (e.g. see the comment out
>> > "Access-Control-Allow-Origin", where I am returing the EXACT Origin))
>> >
>> >
>> > Here is a JavaScript sample:
>> > http://jsfiddle.net/JY6n4/
>> >
>> >
>> > Just click on the "Register a device" button, and see the errors in the
>> > console....
>> >
>> > So, I am always (with the above jsFiddle) getting:
>> > Origin http://fiddle.jshell.net <http://fiddle.jshell.net/> is not
>> > allowed by Access-Control-Allow-Origin.
>> >
>> > regardless if I use "*" or "http://fiddle.jshell.net" (explicit
>> Origin),
>> > on the "Access-Control-Allow-Origin".     I always thought that "*" is a
>> > wildcard.... allowing everybody and their mother to access the server.
>> >
>> > BTW.
>> > This happens with jQuery _and_ vanilla.js (XHR)..... So....... I am
>> > really overasked, but ... is it possible that the response is correct
>> > (at least the setup / my src), but that RestEasy has any problems with
>> > that stuff ??
>> >
>> >
>> > A few more eyes are highly appreciated on this "issue".
>> >
>> > thanks!!
>> > Matthias
>> >
>> >
>> > --
>> > Matthias Wessendorf
>> >
>> > blog: http://matthiaswessendorf.wordpress.com/
>> > sessions: http://www.slideshare.net/mwessendorf
>> > twitter: http://twitter.com/mwessendorf
>> >
>> > _______________________________________________
>> > aerogear-dev mailing list
>> > aerogear-dev at lists.jboss.org
>> > https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>> --
>> abstractj
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
>
> --
> Matthias Wessendorf
>
> blog: http://matthiaswessendorf.wordpress.com/
> sessions: http://www.slideshare.net/mwessendorf
> twitter: http://twitter.com/mwessendorf
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-dev/attachments/20130619/2b7324ea/attachment-0001.html