search

mikekelly / hal-browser

An API browser for the hal+json media type
MIT License
839 stars 157 forks source link

CORS issue in recent versions #78

Open joshco opened 8 years ago

joshco commented 8 years ago

While trying the current branch of hal browser, I'm noticing CORS errors when going across site.

XMLHttpRequest cannot load http://foo.bar.baz/api/v1/. A wildcard '*' cannot be used in the 'Access-Control-Allow-Origin' header when the credentials flag is true. Origin 'http://haltalk.herokuapp.com' is therefore not allowed access.

This works with an older version of hal-browser.
I notice issue #58 "Allow credentials for CORS requests" which seems to set the allowCredentials option in the hal browser client.

AndersDJohnson commented 8 years ago

Same issue here still, when requesting an HTTPS API.