[
https://issues.apache.org/jira/browse/CXF-5901?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved CXF-5901.
--------------------------------------
Resolution: Won't Fix
> Investigate how WebSocket Transport can support CORS
> -----------------------------------------------------
>
> Key: CXF-5901
> URL: https://issues.apache.org/jira/browse/CXF-5901
> Project: CXF
> Issue Type: Task
> Components: JAX-RS, Transports
> Reporter: Sergey Beryozkin
> Priority: Major
>
> AFAIK CORS requirements can be enforced by compliant WebSocket
> implementations such as Atmosphere and that any secure WebSocket server
> should be capable of implementing CORS filters.
> The question is: can we reuse CXF JAX-RS CORS filters when working with web
> sockets and when we need to worry about it. I guess it is only an upgrade
> request issue, once the upgrade is done using a wss protocol we have a secure
> channel in place.
> If so then CXF filters will likely do as they will reject the initial
> upgraded request if it does not meet the CORS restrictions, but the transport
> may need to discard the upgraded connection in such cases.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
