On 07/11/11 14:39, Benson Margulies wrote:
Why a filter? I guess, the advantage would be that it would work for
SOAP and REST both. On the other hand, it's kind of 'over there'. Does
JAX-RS have any other way to share out adding a handler for OPTIONS
(and access control checking on Origin) that would have any
advantages?

we can get a JAX-RS filter and a servlet filter sharing the same code, this is what is done in the OAuth module

But I've had no experience with CORS so I'd need your help :-) We may want to get filters and the supporting code located in in say a cxf-rt-rs-security-cors module under rt/rs/security

Cheers, Sergey


On Mon, Nov 7, 2011 at 9:10 AM, Sergey Beryozkin<sberyoz...@gmail.com>  wrote:
Hi Benson
On 07/11/11 04:04, Benson Margulies wrote:

Has anyone considered adding CORS (http://www.w3.org/TR/cors/) to CXF
REST services? Obviously, it could be coded one service at a time, but
it looks handy.

Can you look at
http://cxf.547215.n5.nabble.com/CORS-Interceptor-Filter-Endpoint-td4793366.html
please ?
Do you reckon we should ship a CXF specific CORS filter ?

Thanks, Sergey


Reply via email to