ngageoint / scale

Processing framework for containerized algorithms
http://ngageoint.github.io/scale/
Apache License 2.0
105 stars 45 forks source link

CORS Headers for Scale APIs #1804

Closed gisjedi closed 5 years ago

gisjedi commented 5 years ago

Description Currently, if you try to make AJAX requests to the Silo / API through the fronting UI server (scale-ui) from a different domain, you will be forbidden by CORS.

Reproduction Steps Steps to reproduce the problem:

  1. Deploy Scale UI with a VHOST of bla.com
  2. Create a website that makes AJAX requests to either http://bla.com/silo or http://bla.com/api/v6/version
  3. Deploy to blabla.com
  4. Browse to https://blabla.com
  5. Observer CORS error in network traffic from your browser DevTools

Expected behavior AJAX request should success with properly configured response headers from Scale UI.