Hi,
The OPTIONS request method which handles the preflight request is
correct but CORS headers should be added at the POST method response
headers as well. I've performed the below changes and it worked. The
changes are marked with bold.
In addition change the clientIdentifier to alias in the request body.
private Response makeCORS(ResponseBuilder rb) {
rb.header("Access-Control-Allow-Origin", "*")
.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS,
PUT, DELETE")
.header("Access-Control-Allow-Headers", "accept, origin,
ag-mobile-variant, content-type");
return rb.build();
}
@POST
@Consumes(MediaType.APPLICATION_JSON)
public Response registerInstallation(
MobileVariantInstanceImpl entity,
@Context HttpServletRequest request) {
...
return makeCORS(Response.ok("[]"));
}
On Wed, 2013-06-19 at 11:52 +0200, Matthias Wessendorf wrote:
Hi,
trying to add CORS, to the Server (using RestEasy), I did this:
https://github.com/aerogear/aerogear-unified-push-server/commit/7ccb2e7fb
(and some more variations.... (e.g. see the comment out
"Access-Control-Allow-Origin", where I am returing the EXACT Origin))
Here is a JavaScript sample:
http://jsfiddle.net/JY6n4/
Just click on the "Register a device" button, and see the errors in
the console....
So, I am always (with the above jsFiddle) getting:
Origin
http://fiddle.jshell.net is not allowed by
Access-Control-Allow-Origin.
regardless if I use "*" or "http://fiddle.jshell.net" (explicit
Origin), on the "Access-Control-Allow-Origin". I always thought
that "*" is a wildcard.... allowing everybody and their mother to
access the server.
BTW.
This happens with jQuery _and_ vanilla.js (XHR)..... So....... I am
really overasked, but ... is it possible that the response is correct
(at least the setup / my src), but that RestEasy has any problems with
that stuff ??
A few more eyes are highly appreciated on this "issue".
thanks!!
Matthias
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev