Details
Description
Cross origin resource sharing (CORS) is a relevant spec these days with the emergence of HTML5 & JS clients that consume data via REST APIs. For a given app, in many cases the host that serves the JS (e.g. foo.com) is different than the host that serves the data (e.g. api.foo.com). In this case, CORS can enable the cross-domain communication.
It would be useful if Spring MVC provided code & guidance on how to configure CORS when implementing a Java-backed REST API consumed by JS clients located in other domains. Prior work exists that would be a candidate for integration.
See the resources below:
CORS Spec: http://www.w3.org/TR/cors/
Basic example of a CorsFilter implementation: https://gist.github.com/2232095
What appears to be a full-featured CorsFilter implementation: https://bitbucket.org/jsumners/corsfilter
Attachments
Issue Links
- is related to
-
SEC-2273 CORS Suport
-
- Closed
-
-
SPR-12316 Comprehensive strategy for securing Origins in web transports
-
- Closed
-
- relates to
-
DATAREST-333 Handle OPTIONS request for CORS
-
- Closed
-
-
SPR-11437 Undocumented auto CORS for websocket endpoint breaking existing CORS code
-
- Closed
-