Re: [Resteasy-users] CORS issue with RestEasy ?

[Bill B. <bb...@re...>]

Somebody propose something and I'll implement it.  I know nothing about 
CORS.

On 6/19/2013 2:07 PM, Chris Bredesen wrote:
> I do feel like there should be a facility to add CORS headers to
> select/all resources in RestEasy but I admit I Have not thought it
> through deeply and I kinda take the fact that it doesn't already exist
> to mean that there's probably some very good reason not to do it ....
>
> @CrossOrigin(...) almost seems too good to be true
>
> On 06/19/2013 01:20 PM, Matthias Wessendorf wrote:
>> Doh!
>>
>> I forgot to include the "Access-Control-Allow-Origin" header on the
>> actual response of the POST....
>>
>> I was just "decorating" the response for the damn preflight request :)
>>
>>
>> Sorry for the noise
>>
>> -M
>>
>>
>>
>> On Wed, Jun 19, 2013 at 2:24 PM, Bill Burke <bb...@re...
>> <mailto:bb...@re...>> wrote:
>>
>>      I'm not exactly sure what you're asking me to look at.  The code looks
>>      fine, but you can inject @Context HttpHeaders instead of the
>>      HttpServletRequest.  I honestly don't have any experience with CORS, so
>>      I can't really help you that much....
>>
>>      ...But...if you do figure out your problem and think there's something
>>      we can add to Resteasy to support CORS, let me know and either spec it
>>      out for us, or submit your own pull request.
>>
>>      On 6/19/2013 6:40 AM, Matthias Wessendorf wrote:
>>       > Hi,
>>       >
>>       > trying to add CORS, to the Server (using RestEasy), I did this:
>>       >
>>      https://github.com/aerogear/aerogear-unified-push-server/commit/7ccb2e7fb
>>       >
>>       > (and some more variations.... (e.g. see the comment out
>>       > "Access-Control-Allow-Origin", where I am returning the EXACT
>>      Origin))
>>       >
>>       >
>>       > Here is a JavaScript sample:
>>       > http://jsfiddle.net/JY6n4/
>>       >
>>       >
>>       > Just click on the "Register a device" button, and see the errors
>>      in the
>>       > console....
>>       >
>>       > So, I am always (with the above jsFiddle) getting:
>>       > Origin http://fiddle.jshell.net <http://fiddle.jshell.net/> is not
>>       > allowed by Access-Control-Allow-Origin.
>>       >
>>       > regardless if I use "*" or "http://fiddle.jshell.net
>>       > <http://fiddle.jshell.net/>" (explicit Origin), on the
>>       > "Access-Control-Allow-Origin".     I always thought that "*" is a
>>       > wildcard.... allowing everybody and their mother to access the
>>      server.
>>       >
>>       > BTW.
>>       > This happens with jQuery _and_ vanilla.js (XHR)..... So....... I am
>>       > really overasked,...
>>       >
>>       >
>>       > but ... is it possible that the response is correct (at least the
>>      setup
>>       > / my src), and that RestEasy has any problems with that stuff ??
>>       >
>>       >
>>       > A few more eyes are highly appreciated on this "issue".
>>       >
>>       > thanks!!
>>       >
>>       >
>>       >
>>       > --
>>       > Matthias Wessendorf
>>       >
>>       > blog: http://matthiaswessendorf.wordpress.com/
>>       > sessions: http://www.slideshare.net/mwessendorf
>>       > twitter: http://twitter.com/mwessendorf
>>       >
>>       >
>>       >
>>      ------------------------------------------------------------------------------
>>       > This SF.net email is sponsored by Windows:
>>       >
>>       > Build for Windows Store.
>>       >
>>       > http://p.sf.net/sfu/windows-dev2dev
>>       >
>>       >
>>       >
>>       > _______________________________________________
>>       > Resteasy-users mailing list
>>       > Res...@li...
>>      <mailto:Res...@li...>
>>       > https://lists.sourceforge.net/lists/listinfo/resteasy-users
>>       >
>>
>>      --
>>      Bill Burke
>>      JBoss, a division of Red Hat
>>      http://bill.burkecentral.com
>>
>>      ------------------------------------------------------------------------------
>>      This SF.net email is sponsored by Windows:
>>
>>      Build for Windows Store.
>>
>>      http://p.sf.net/sfu/windows-dev2dev
>>      _______________________________________________
>>      Resteasy-users mailing list
>>      Res...@li...
>>      <mailto:Res...@li...>
>>      https://lists.sourceforge.net/lists/listinfo/resteasy-users
>>
>>
>>
>>
>> --
>> Matthias Wessendorf
>>
>> blog: http://matthiaswessendorf.wordpress.com/
>> sessions: http://www.slideshare.net/mwessendorf
>> twitter: http://twitter.com/mwessendorf
>>
>>
>> ------------------------------------------------------------------------------
>> This SF.net email is sponsored by Windows:
>>
>> Build for Windows Store.
>>
>> http://p.sf.net/sfu/windows-dev2dev
>>
>>
>>
>> _______________________________________________
>> Resteasy-users mailing list
>> Res...@li...
>> https://lists.sourceforge.net/lists/listinfo/resteasy-users
>>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
> _______________________________________________
> Resteasy-users mailing list
> Res...@li...
> https://lists.sourceforge.net/lists/listinfo/resteasy-users
>

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com