You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Matt Bishop (Created) (JIRA)" <ji...@apache.org> on 2012/03/07 01:01:57 UTC

[jira] [Created] (CXF-4167) Configure CORS allowOrigins addresses in XML

Configure CORS allowOrigins addresses in XML
--------------------------------------------

                 Key: CXF-4167
                 URL: https://issues.apache.org/jira/browse/CXF-4167
             Project: CXF
          Issue Type: Improvement
          Components: JAX-RS Security
    Affects Versions: 2.5.2
         Environment: Any
            Reporter: Matt Bishop


CORS support uses annotations exclusively define the shape of the CORS support. For most attributes, this is fine because it needs to be scoped to the methods. However, the actual origin servers needs to be configured in XML as it will likely change over time, and in specific deployments.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (CXF-4167) Configure CORS allowOrigins addresses in XML

Posted by "Sergey Beryozkin (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CXF-4167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13224151#comment-13224151 ] 

Sergey Beryozkin commented on CXF-4167:
---------------------------------------

I guess we will more likely get the CORS filter itself enhanced with the origin servers properties for a start, as opposed to introducing the dedicated XML format for CORS. 
                
> Configure CORS allowOrigins addresses in XML
> --------------------------------------------
>
>                 Key: CXF-4167
>                 URL: https://issues.apache.org/jira/browse/CXF-4167
>             Project: CXF
>          Issue Type: Improvement
>          Components: JAX-RS Security
>    Affects Versions: 2.5.2
>         Environment: Any
>            Reporter: Matt Bishop
>
> CORS support uses annotations exclusively define the shape of the CORS support. For most attributes, this is fine because it needs to be scoped to the methods. However, the actual origin servers needs to be configured in XML as it will likely change over time, and in specific deployments.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (CXF-4167) Configure CORS allowOrigins addresses in XML

Posted by "Sergey Beryozkin (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CXF-4167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13227959#comment-13227959 ] 

Sergey Beryozkin commented on CXF-4167:
---------------------------------------

Hi, 
actually, CrossOriginResourceSharingFilter has the property allowOrigins, however it's always overridden if the annotation is set, so I'll apply a minor fix
                
> Configure CORS allowOrigins addresses in XML
> --------------------------------------------
>
>                 Key: CXF-4167
>                 URL: https://issues.apache.org/jira/browse/CXF-4167
>             Project: CXF
>          Issue Type: Improvement
>          Components: JAX-RS Security
>    Affects Versions: 2.5.2
>         Environment: Any
>            Reporter: Matt Bishop
>
> CORS support uses annotations exclusively define the shape of the CORS support. For most attributes, this is fine because it needs to be scoped to the methods. However, the actual origin servers needs to be configured in XML as it will likely change over time, and in specific deployments.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (CXF-4167) Configure CORS allowOrigins addresses in XML

Posted by "Sergey Beryozkin (Resolved) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-4167?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sergey Beryozkin resolved CXF-4167.
-----------------------------------

       Resolution: Fixed
    Fix Version/s: 2.6
                   2.5.3
         Assignee: Sergey Beryozkin
    
> Configure CORS allowOrigins addresses in XML
> --------------------------------------------
>
>                 Key: CXF-4167
>                 URL: https://issues.apache.org/jira/browse/CXF-4167
>             Project: CXF
>          Issue Type: Improvement
>          Components: JAX-RS Security
>    Affects Versions: 2.5.2
>         Environment: Any
>            Reporter: Matt Bishop
>            Assignee: Sergey Beryozkin
>             Fix For: 2.5.3, 2.6
>
>
> CORS support uses annotations exclusively define the shape of the CORS support. For most attributes, this is fine because it needs to be scoped to the methods. However, the actual origin servers needs to be configured in XML as it will likely change over time, and in specific deployments.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira