I do feel like there should be a facility to add CORS headers to 
select/all resources in RestEasy but I admit I Have not thought it 
through deeply and I kinda take the fact that it doesn't already exist 
to mean that there's probably some very good reason not to do it ....

@CrossOrigin(...) almost seems too good to be true

On 06/19/2013 01:20 PM, Matthias Wessendorf wrote:
> Doh!
>
> I forgot to include the "Access-Control-Allow-Origin" header on the
> actual response of the POST....
>
> I was just "decorating" the response for the damn preflight request :)
>
>
> Sorry for the noise
>
> -M
>
>
>
> On Wed, Jun 19, 2013 at 2:24 PM, Bill Burke <bbu...@redhat.com
> <mailto:bbu...@redhat.com>> wrote:
>
>     I'm not exactly sure what you're asking me to look at.  The code looks
>     fine, but you can inject @Context HttpHeaders instead of the
>     HttpServletRequest.  I honestly don't have any experience with CORS, so
>     I can't really help you that much....
>
>     ...But...if you do figure out your problem and think there's something
>     we can add to Resteasy to support CORS, let me know and either spec it
>     out for us, or submit your own pull request.
>
>     On 6/19/2013 6:40 AM, Matthias Wessendorf wrote:
>      > Hi,
>      >
>      > trying to add CORS, to the Server (using RestEasy), I did this:
>      >
>     https://github.com/aerogear/aerogear-unified-push-server/commit/7ccb2e7fb
>      >
>      > (and some more variations.... (e.g. see the comment out
>      > "Access-Control-Allow-Origin", where I am returning the EXACT
>     Origin))
>      >
>      >
>      > Here is a JavaScript sample:
>      > http://jsfiddle.net/JY6n4/
>      >
>      >
>      > Just click on the "Register a device" button, and see the errors
>     in the
>      > console....
>      >
>      > So, I am always (with the above jsFiddle) getting:
>      > Origin http://fiddle.jshell.net <http://fiddle.jshell.net/> is not
>      > allowed by Access-Control-Allow-Origin.
>      >
>      > regardless if I use "*" or "http://fiddle.jshell.net
>      > <http://fiddle.jshell.net/>" (explicit Origin), on the
>      > "Access-Control-Allow-Origin".     I always thought that "*" is a
>      > wildcard.... allowing everybody and their mother to access the
>     server.
>      >
>      > BTW.
>      > This happens with jQuery _and_ vanilla.js (XHR)..... So....... I am
>      > really overasked,...
>      >
>      >
>      > but ... is it possible that the response is correct (at least the
>     setup
>      > / my src), and that RestEasy has any problems with that stuff ??
>      >
>      >
>      > A few more eyes are highly appreciated on this "issue".
>      >
>      > thanks!!
>      >
>      >
>      >
>      > --
>      > Matthias Wessendorf
>      >
>      > blog: http://matthiaswessendorf.wordpress.com/
>      > sessions: http://www.slideshare.net/mwessendorf
>      > twitter: http://twitter.com/mwessendorf
>      >
>      >
>      >
>     
> ------------------------------------------------------------------------------
>      > This SF.net email is sponsored by Windows:
>      >
>      > Build for Windows Store.
>      >
>      > http://p.sf.net/sfu/windows-dev2dev
>      >
>      >
>      >
>      > _______________________________________________
>      > Resteasy-users mailing list
>      > Resteasy-users@lists.sourceforge.net
>     <mailto:Resteasy-users@lists.sourceforge.net>
>      > https://lists.sourceforge.net/lists/listinfo/resteasy-users
>      >
>
>     --
>     Bill Burke
>     JBoss, a division of Red Hat
>     http://bill.burkecentral.com
>
>     
> ------------------------------------------------------------------------------
>     This SF.net email is sponsored by Windows:
>
>     Build for Windows Store.
>
>     http://p.sf.net/sfu/windows-dev2dev
>     _______________________________________________
>     Resteasy-users mailing list
>     Resteasy-users@lists.sourceforge.net
>     <mailto:Resteasy-users@lists.sourceforge.net>
>     https://lists.sourceforge.net/lists/listinfo/resteasy-users
>
>
>
>
> --
> Matthias Wessendorf
>
> blog: http://matthiaswessendorf.wordpress.com/
> sessions: http://www.slideshare.net/mwessendorf
> twitter: http://twitter.com/mwessendorf
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
>
>
>
> _______________________________________________
> Resteasy-users mailing list
> Resteasy-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/resteasy-users
>

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Resteasy-users mailing list
Resteasy-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/resteasy-users

Reply via email to