Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support CORS request filtering #2163

Closed
otsakir opened this issue May 19, 2017 · 0 comments
Closed

Support CORS request filtering #2163

otsakir opened this issue May 19, 2017 · 0 comments
Assignees
@otsakir
Labels
REST API Security / Access Control / IDS/IPS
Milestone
Orestis Milestone 4

Comments

@otsakir
Copy link
Contributor

otsakir commented May 19, 2017 •
edited
Loading

Currently no CORS related headers are returned in REST API responses preventing use of the API from UI clients on a different domain (RVD-ui).

Exceptions to CORS restrictions can be applied using a filter.

  • Add CORS header in responses. Maybe through a ContainerResponseFilter.
  • The 'Access-Control-Allow-Origin = *' can be returned as a first iteration

More fine grained control on which origins will be accepted will be added in a separate issue.
otsakir added a commit that referenced this issue May 31, 2017
@otsakir
Added allow-all CORS filter
19ca966 
refers #2163
@otsakir otsakir added this to the RVD Milestone 4 milestone May 31, 2017
@otsakir otsakir self-assigned this May 31, 2017
@otsakir otsakir changed the title Support configurable/dynamic CORS request filtering Support CORS request filtering Jun 13, 2017
@otsakir otsakir closed this as completed Jun 13, 2017
otsakir added a commit that referenced this issue Jun 16, 2017
@otsakir
Added allow-all CORS filter
a58dd00 
refers #2163
gvagenas pushed a commit that referenced this issue Jan 13, 2022
@otsakir
Added allow-all CORS filter
b009ff4 
refers #2163
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@otsakir otsakir

Labels
REST API Security / Access Control / IDS/IPS
Projects
None yet
Milestone
Orestis Milestone 4
Development

No branches or pull requests
1 participant
@otsakir