Hello Andrea,
We are not yet, but will be very soon. I am passing a header variable only
right now. But, as we get closer to production we will be using a couple of
methods of authentication.
Hopefully, I said that right.
Joe
On Mon, Sep 10, 2018, 11:31 AM Andrea Aime
wrote:
> Hi Torben,
> look
Hi Torben,
looking at the original stackoverflow post, I believe the "bin" package is
used in this case, thus, Jetty.
Running on Tomcat for production is probably a better idea, though :-)
Another angle to look at might be the authentication configuration... is
the server allowing anonymous access
Hello Joe,
I believe newer versions of Tomcat (8.5, 9.0) require slightly more strict
CORS configuration than older versions.
I have had some success with the following general configuration (on Tomcat
8.5):
CorsFilter
org.apache.catalina.filters.CorsFilter
cors.allowed.origins
*
Hi Joe,
question, do you have service security set up, so that GeoServer would
outright deny
a request unless the user making the request is authorized to?
E.g., something like denying any WFS request if the user does not have a
particular role?
Cheers
Andrea
On Mon, Sep 10, 2018 at 7:13 PM Joe M
I'm not super up to speed on how you are using CORS. But i have it working
fine in my build. Please let me know how I can help..
Geoserver 2.13.2.war, Tomcat 9.0.7, Debian Docker Container.
Maybe just looking at my web.xml file would help?
Joe
On Mon, Sep 10, 2018, 10:05 AM Andrea Aime
wrote
Hi,
for the longest time CORS has been "not our problem", it's normally managed
in the web container (e.g., Tomcat, Jetty) or in
the eventual application fronting GeoServer (e.g., Apache, NGINX).
Maybe things have changed with the latest versions of Spring, if I search
for preflight test I find all
Hello,
i had a working geoserver installation last year where CORS was enabled,
but for some reason now I cannot reproduce this.
I have posted all the details to
https://gis.stackexchange.com/questions/294744/geoserver-wms-cors-enabled-in-web-xml-still-error
but I can repost them here if you need