[
https://issues.apache.org/jira/browse/SHIRO-725?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17070306#comment-17070306
]
Francois Papon commented on SHIRO-725:
--------------------------------------
[~bmarwell] Thanks for your feedback ;)
1 - I think it make sense to add this filter in the actuel web module.
2 - I was thinking to configure the Cors as a simple filter like the others in
the ini file, I'm not shure we need to add a dedicated section:
{code:java}
[main]
corsFilter1 = org.apache.shiro.web.filter.CORSFilter
corsFilter1.attribute = value
...
[urls]
/logout = logout
/login = corsFilter
/** = corsFilter[permissive]
...
{code}
We could add a default Cors filter as a new web default filter:
[https://shiro.apache.org/web.html#Web-DefaultFilters]
3 - For the list of the statements we could inspire us with the Apache Tomcat
implementation:
[https://github.com/apache/tomcat/blob/master/java/org/apache/catalina/filters/CorsFilter.java]
Thoughts?
> Add a CORS filter
> -----------------
>
> Key: SHIRO-725
> URL: https://issues.apache.org/jira/browse/SHIRO-725
> Project: Shiro
> Issue Type: Improvement
> Components: Web
> Reporter: Francois Papon
> Assignee: Francois Papon
> Priority: Major
> Fix For: 1.6.0
>
>
> It would be usefull to add a new filter in order to deal with CORS request.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
