** No longer affects: ubuntu-ui-toolkit -- You received this bug notification because you are a member of Ubuntu SDK bug tracking, which is subscribed to ubuntu-ui-toolkit in Ubuntu. https://bugs.launchpad.net/bugs/1298426
Title: XMLHttpRequest onreadystatechange never called when doing a post to certain https urls Status in “ubuntu-ui-toolkit” package in Ubuntu: Confirmed Bug description: While attempting to write an application that required authenticating with a REST API, I discovered that when posting to the end point, onreadystatechange for the request object was never called. However, the same code worked fine in a web browser. I boiled down the code to the smallest sample that I could. Note that the code sample here will not work to log in the user, as I removed extraneous code to focus on the fact that onreadystatechange is never called. When this code is run in qml, the following output is produced. Notice that readystatechange is never invoked. [code] import QtQuick 2.0 Rectangle { Component.onCompleted: { formPost("http://api.npr.org/identity/v1/login/npr") formPost("https://api.npr.org/identity/v1/login/npr") formPost("https://google.com") } function formPost(location) { var req = new XMLHttpRequest(); console.log("Posting to " + location) req.open("POST", location, true); req.onreadystatechange = function() { console.log("Ready state changed to " + req.readyState + " for " + location) if (req.readyState == 4) { console.log("Data received for " + location) } } req.send(null); } } [/code] [output] Starting /usr/lib/x86_64-linux-gnu/qt5/bin/qmlscene... Posting to http://api.npr.org/identity/v1/login/npr Posting to https://api.npr.org/identity/v1/login/npr Posting to https://google.com Ready state changed to 2 for https://google.com Ready state changed to 3 for https://google.com Ready state changed to 3 for https://google.com Ready state changed to 3 for https://google.com Ready state changed to 4 for https://google.com Data received for https://google.com Ready state changed to 2 for http://api.npr.org/identity/v1/login/npr Ready state changed to 3 for http://api.npr.org/identity/v1/login/npr Ready state changed to 3 for http://api.npr.org/identity/v1/login/npr Ready state changed to 3 for http://api.npr.org/identity/v1/login/npr Ready state changed to 3 for http://api.npr.org/identity/v1/login/npr Ready state changed to 4 for http://api.npr.org/identity/v1/login/npr Data received for http://api.npr.org/identity/v1/login/npr [/output] However, essentially the identical code in a browser does show that the https endpoint for npr does work. Note that when I include the proper credenitals, the code works in the browser, but in qml onreadystatechange is never called. [code] <HTML> <HEAD> <SCRIPT> function init() { formPost("http://api.npr.org/identity/v1/login/npr") formPost("https://api.npr.org/identity/v1/login/npr") formPost("https://google.com") } function formPost(location) { var req = new XMLHttpRequest(); console.log("Posting to " + location) req.open("POST", location, true); req.onreadystatechange = function() { console.log("Ready state changed to " + req.readyState + " for " + location) if (req.readyState == 4) { console.log("Data received for " + location) } } req.send(null); } </SCRIPT> </HEAD> <BODY onload=init()> <P>Form post test</P> </BODY> </HTML> [/code] [output] Posting to http://api.npr.org/identity/v1/login/npr test.html:15 Posting to https://api.npr.org/identity/v1/login/npr test.html:15 Posting to https://google.com test.html:15 XMLHttpRequest cannot load http://api.npr.org/identity/v1/login/npr. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'null' is therefore not allowed access. test.html:1 Ready state changed to 4 for http://api.npr.org/identity/v1/login/npr test.html:21 Data received for http://api.npr.org/identity/v1/login/npr test.html:24 XMLHttpRequest cannot load https://google.com/. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'null' is therefore not allowed access. test.html:1 Ready state changed to 4 for https://google.com test.html:21 Data received for https://google.com test.html:24 POST https://api.npr.org/identity/v1/login/npr 400 (Bad Request) test.html:28 Ready state changed to 2 for https://api.npr.org/identity/v1/login/npr test.html:21 Ready state changed to 3 for https://api.npr.org/identity/v1/login/npr test.html:21 Ready state changed to 4 for https://api.npr.org/identity/v1/login/npr test.html:21 Data received for https://api.npr.org/identity/v1/login/npr [/output] To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-ui-toolkit/+bug/1298426/+subscriptions -- Mailing list: https://launchpad.net/~ubuntu-sdk-bugs Post to : ubuntu-sdk-bugs@lists.launchpad.net Unsubscribe : https://launchpad.net/~ubuntu-sdk-bugs More help : https://help.launchpad.net/ListHelp