Hi With related to CORS the headers they should be set in the gateway as well since we are configuring CORS in gateway so the headers should be as the configuration of the gateway not the back-end.
Also we can capture allowed domains per API basis. Allowed methods and headers are already captured in API definition. Regards Jo On Tue, Jan 13, 2015 at 3:37 PM, Sanjeewa Malalgoda <[email protected]> wrote: > > > On Tue, Jan 13, 2015 at 11:40 AM, Joseph Fonseka <[email protected]> wrote: > >> >> Hi >> >> Currently in API Manager we send the OPTIONS call to the back-end server >> to respond. But if the API does not expose all the HTTP methods in >> back-end, OPTIONS call response will be invalid. >> >> 1. Should we respond to the OPTIONS call from the gateway with the Allow >> header including only the HTTP methods exposed by the API. >> > When we consider CORS use cases preflight call happens as OPTIONS call. So > shouldn't we pass them to back end without doing something in gateway? IMO > this should be configurable via some kind of configuration. And it would be > ideal if we can do this per API level without having global parameter to > all APIs in system > > Thanks, > sanjeewa. > >> >> 2. If we are doing above should we give an option to the user to override >> in case if he want to send it to back-end. >> >> 3. Is there a valid requirement to show the OPTIONS method in API Design >> phase, shouldn't it be enabled by default. >> >> Thanks >> Jo >> >> Related >> https://wso2.org/jira/browse/APIMANAGER-1704 >> >> >> >> >> >> >> >> -- >> *Joseph Fonseka* >> WSO2 Inc.; http://wso2.com >> lean.enterprise.middleware >> >> mobile: +94 772 512 430 >> skype: jpfonseka >> >> * <http://lk.linkedin.com/in/rumeshbandara>* >> >> > > > -- > > *Sanjeewa Malalgoda* > WSO2 Inc. > Mobile : +94713068779 > > <http://sanjeewamalalgoda.blogspot.com/>blog > :http://sanjeewamalalgoda.blogspot.com/ > <http://sanjeewamalalgoda.blogspot.com/> > > > -- -- *Joseph Fonseka* WSO2 Inc.; http://wso2.com lean.enterprise.middleware mobile: +94 772 512 430 skype: jpfonseka * <http://lk.linkedin.com/in/rumeshbandara>*
_______________________________________________ Architecture mailing list [email protected] https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
