Re: [Geoserver-users] cannot enable CORS anymore

2018-09-10 Thread Joe Murphy
Hello Andrea, We are not yet, but will be very soon. I am passing a header variable only right now. But, as we get closer to production we will be using a couple of methods of authentication. Hopefully, I said that right. Joe On Mon, Sep 10, 2018, 11:31 AM Andrea Aime wrote: > Hi Torben, > look

Re: [Geoserver-users] cannot enable CORS anymore

2018-09-10 Thread Andrea Aime
Hi Torben, looking at the original stackoverflow post, I believe the "bin" package is used in this case, thus, Jetty. Running on Tomcat for production is probably a better idea, though :-) Another angle to look at might be the authentication configuration... is the server allowing anonymous access

Re: [Geoserver-users] cannot enable CORS anymore

2018-09-10 Thread Torben Barsballe
Hello Joe, I believe newer versions of Tomcat (8.5, 9.0) require slightly more strict CORS configuration than older versions. I have had some success with the following general configuration (on Tomcat 8.5): CorsFilter org.apache.catalina.filters.CorsFilter cors.allowed.origins *

Re: [Geoserver-users] cannot enable CORS anymore

2018-09-10 Thread Andrea Aime
Hi Joe, question, do you have service security set up, so that GeoServer would outright deny a request unless the user making the request is authorized to? E.g., something like denying any WFS request if the user does not have a particular role? Cheers Andrea On Mon, Sep 10, 2018 at 7:13 PM Joe M

Re: [Geoserver-users] cannot enable CORS anymore

2018-09-10 Thread Joe Murphy
I'm not super up to speed on how you are using CORS. But i have it working fine in my build. Please let me know how I can help.. Geoserver 2.13.2.war, Tomcat 9.0.7, Debian Docker Container. Maybe just looking at my web.xml file would help? Joe On Mon, Sep 10, 2018, 10:05 AM Andrea Aime wrote

Re: [Geoserver-users] cannot enable CORS anymore

2018-09-10 Thread Andrea Aime
Hi, for the longest time CORS has been "not our problem", it's normally managed in the web container (e.g., Tomcat, Jetty) or in the eventual application fronting GeoServer (e.g., Apache, NGINX). Maybe things have changed with the latest versions of Spring, if I search for preflight test I find all

[Geoserver-users] cannot enable CORS anymore

2018-09-04 Thread Steric, Nenad
Hello, i had a working geoserver installation last year where CORS was enabled, but for some reason now I cannot reproduce this. I have posted all the details to https://gis.stackexchange.com/questions/294744/geoserver-wms-cors-enabled-in-web-xml-still-error but I can repost them here if you need