Headers: Access-Control-Allow

[boldt]

If we run a POST request (e.g. to an node in the Spitfire SSP) with Chrome, it somehow does not work. Probably the HTTP response must set some additional CORS headers. This should be done with an additional flag on the Response, such as setAccessControlAllow(true):

Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept

The * is a security risk, but it should work as a first workaround.

See:

• http://stackoverflow.com/q/5027705
• https://developer.mozilla.org/en-US/docs/HTTP_access_control

[okleine]

Not a nCoAP issue.

[boldt]

AFAIK, I pushed it already to the SSP.

[okleine]

Yes, but this is not related to the nCoAP project.