Re: Receiving 403 with Tomcat 9, works with Tomcat 8

[Jörg Schaible]

Hi Mark,

Am Mittwoch, 6. Februar 2019, 11:45:46 CET schrieb Mark Thomas:
> Exact Tomcat 8 version?
> Exact Tomcat 9 version?
> 
> How is CORS configured in your application?

the VersionLoggerListener entries from the catalina.log files:

this is the machine with Tomcat 8:
============== %< ==================
- Server version:        Apache Tomcat/8.0.41
- Server built:          Jan 18 2017 22:19:39 UTC
- Server number:         8.0.41.0
- OS Name:               Windows Server 2012 R2
- OS Version:            6.3
- Architecture:          amd64
- Java Home:             D:\Programme\Java
- JVM Version:           1.8.0_121-b13
- JVM Vendor:            Oracle Corporation
- CATALINA_BASE:         D:\Programme\Tomcat
- CATALINA_HOME:         D:\Programme\Tomcat
- Command line argument: -Dcatalina.home=D:\Programme\Tomcat
- Command line argument: -Dcatalina.base=D:\Programme\Tomcat
- Command line argument: -Djava.endorsed.dirs=D:\Programme\Tomcat\endorsed
- Command line argument: -Djava.io.tmpdir=D:\Programme\Tomcat\temp
- Command line argument: -
Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
- Command line argument: -Djava.util.logging.config.file=D:
\Programme\Tomcat\conf\logging.properties
- Command line argument: exit
- Command line argument: -Xms5120m
- Command line argument: -Xmx30720m
============== %< ==================

this is the machine with Tomcat 9:
============== %< ==================
- Server Version:        Apache Tomcat/9.0.14
- Server built:          Dec 6 2018 21:13:53 UTC
- Server version number: 9.0.14.0
- OS Name:               Windows Server 2012 R2
- OS Version:            6.3
- Architektur:          amd64
- Java Home:             D:\Programme\OpenJDK11
- JVM Version:           11.0.2+9
- JVM Hersteller:            Oracle Corporation
- CATALINA_BASE:         D:\Programme\Tomcat
- CATALINA_HOME:         D:\Programme\Tomcat
- Command line argument: -Dcatalina.home=D:\Programme\Tomcat
- Command line argument: -Dcatalina.base=D:\Programme\Tomcat
- Command line argument: -Djava.io.tmpdir=D:\Programme\Tomcat\temp
- Command line argument: -
Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
- Command line argument: -Djava.util.logging.config.file=D:
\Programme\Tomcat\conf\logging.properties
- Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
- Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
- Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
- Command line argument: exit
- Command line argument: abort
- Command line argument: -Xms5120m
- Command line argument: -Xmx30720m
============== %< ==================

The CORS-Settings from the web.xml:

============== %< ==================
  <filter>
    <filter-name>CorsFilter</filter-name>
    <filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
    <init-param>
      <param-name>cors.exposedHeaders</param-name>
      <param-value>Set-Cookie</param-value>
    </init-param>
  </filter>
  <filter-mapping>
    <filter-name>CorsFilter</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>
============== %< ==================

Regards,
Jörg



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org