Skip to content

Latest commit

 

History

History
204 lines (161 loc) · 7.85 KB

ALFRESCOCORS.md

File metadata and controls

204 lines (161 loc) · 7.85 KB

CORS solving strategies

The web client that we are building with the application development framework will be loaded from a different web server than the Alfresco Platform is running on. So we need to tell the Alfresco server that any request that comes in from this custom web client should be allowed access to the Content Repository. This is done by enabling CORS.

If you are experiencing this kind of problem, see one of the following:

  1. Configure Webpack Proxy
  2. Configure angular-cli Proxy
  3. Configure nginx proxy
  4. Enable CORS in CS and PS

Configure Webpack Proxy

If you are using a project created with the Yeoman Generator or the demo shell >=1.6.0, you have already out of the box in your config/webpack.common.js the following configuration. Say we have an app running on http://localhost:3000/ and we want to redirect all calls with the following strategy:

Open the config/webpack.common.js file, find the devServer section and add the content:

devServer: {
        contentBase: helpers.root('dist'),
        compress: true,
        port: 3000,
        historyApiFallback: true,
        host: '0.0.0.0',
        inline: true,
        proxy: {
            '/ecm': {
                target: {
                    host: "0.0.0.0",
                    protocol: 'http:',
                    port: 8080
                },
                pathRewrite: {
                    '^/ecm': ''
                }
            },
            '/bpm': {
                target: {
                    host: "0.0.0.0",
                    protocol: 'http:',
                    port: 9999
                },
                pathRewrite: {
                    '^/bpm': ''
                }
            }
        }
    },

Notes:

  • With different configuration of webpack the devServer properties could be in other webpack files. Search in your configuration files

  • If you are running the App, Content Service or Process Service on different ports change the ports accordingly in your local configuration. For further details about how to configure a webpack proxy please refer to the official documentation.

Configure angular-cli Proxy

Say we have an app running on http://localhost:3000/ and we want to redirect all the calls with the following strategy:

Create a file next to project's package.json, call it proxy.conf.json and add the following content:

{
    '/ecm': {
                target: {
                    host: "0.0.0.0",
                    protocol: 'http:',
                    port: 8080
                },
                pathRewrite: {
                    '^/ecm': ''
                }
            },
    '/bpm': {
                target: {
                    host: "0.0.0.0",
                    protocol: 'http:',
                    port: 9999
                },
                pathRewrite: {
                    '^/bpm': ''
                }
            }
}

Note if you are running the App, Content Service or Process Service on different ports change the ports accordingly in your local configuration. For further details about how to configure a webpack proxy please refer to the official documentation.

Configure nginx proxy

Installing nginx

Most Linux distributions will come with nginx available to install via your package manager and on Mac OS you can use Homebrew.

If you want to install manually however, you can follow the instructions on the download page. See also the specific information for windows users.

Start nginx

Start nginx using the supplied configuration in nginx.conf

nginx -c nginx.conf

Review nginx configuration

To correctly configure nginx use the following file nginx.conf. This will host Activiti, Alfresco and the app dev framework under the same origin.

To make everything work, you should change the address of the ECM and BPM. In the demo app you can do that by clicking on the top right settings menu and change the bottom left options: ECM host and BPM host.

This configuration assumes a few things:

  • Port mapping:
    • nginx entry point: 0.0.0.0:8888
    • Demo Shell: localhost:3000
    • Alfresco: localhost:8080
    • Activiti: localhost:9999

All those values can be modified at their respective location directive on the nginx.conf file.

If you want to know more on how to install and configure nginx to work with the Application Development Framework, information can be found here

Enable CORS in CS and PS

If you want to completely enable CORS calls on your Content Service and Process Service, please refer to the following Alfresco documents:

This is the easiest way, add the enablecors platform module JAR to the $ALF_INSTALL_DIR/modules/platform directory and restart the server.

Note. by default, the CORS filter that is enabled will allow any origin.

Or - Manually update the web.xml file

Modify $ALF_INSTALL_DIR/tomcat/webapps/alfresco/WEB-INF/web.xml and uncomment the following section and update cors.allowOrigin to http://localhost:3000 :

<filter>
      <filter-name>CORS</filter-name>
      <filter-class>com.thetransactioncompany.cors.CORSFilter</filter-class>
      <init-param>
         <param-name>cors.allowGenericHttpRequests</param-name>
         <param-value>true</param-value>
      </init-param>
      <init-param>
         <param-name>cors.allowOrigin</param-name>
         <param-value>http://localhost:3000</param-value>
      </init-param>
      <init-param>
         <param-name>cors.allowSubdomains</param-name>
         <param-value>true</param-value>
      </init-param>
      <init-param>
         <param-name>cors.supportedMethods</param-name>
         <param-value>GET, HEAD, POST, PUT, DELETE, OPTIONS</param-value>
      </init-param>
      <init-param>
         <param-name>cors.supportedHeaders</param-name>
         <param-value>origin, authorization, x-file-size, x-file-name, content-type, accept, x-file-type</param-value>
      </init-param>
      <init-param>
         <param-name>cors.supportsCredentials</param-name>
         <param-value>true</param-value>
      </init-param>
      <init-param>
         <param-name>cors.maxAge</param-name>
         <param-value>3600</param-value>
      </init-param>
</filter>

When specifying the cors.allowOrigin URL make sure to use the URL that will be used by the web client.

Then uncomment filter mappings:

<filter-mapping>
      <filter-name>CORS</filter-name>
      <url-pattern>/api/*</url-pattern>
      <url-pattern>/service/*</url-pattern>
      <url-pattern>/s/*</url-pattern>
      <url-pattern>/cmisbrowser/*</url-pattern>
</filter-mapping>