Thank you – I put that in place, but any time I have: cas.httpWebRequest.cors.enabled: true
no matter what the value of cas.httpWebRequest.cors.allowOrigins[0] is, it returns “Invalid CORS request” I’ve tried both the exact URL of calling app and: cas.httpWebRequest.cors.allowOrigins: '*' This happens even with an app that doesn’t send any CORS requests. Does this ring a bell? I’m using 3.5.8. Best, Aaron From: [email protected] <[email protected]> On Behalf Of Nick Petersen Sent: Tuesday, February 26, 2019 4:38 PM To: [email protected] Subject: [EXTERNAL] Re: [cas-user] CAS 5.x CORS questions To enable it for one Origin, specify the full service URL in the allowOrigins[0] property. Example: cas.httpWebRequest.cors.enabled: true cas.httpWebRequest.cors.allowCredentials: true cas.httpWebRequest.cors.allowOrigins[0]: 'full.url' If you need to add an additional service: cas.httpWebRequest.cors.allowOrigins[1]: 'next.full.url' If you need to allow any service, you can set allowOrigins[0] to "*". This will enable it for all services. Note that you cannot use the star like a wildcard, like '*.full.url'. -Nick -- Nathaniel N. Petersen Systems Architect IT - Administrative Information Systems University of Northern Iowa On Tue, Feb 26, 2019 at 3:20 PM Aaron Bennett <[email protected]<mailto:[email protected]>> wrote: Greetings, We've got a need to enable the CORS headers in CAS. The document here: https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-web-requests<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapereo.github.io%2Fcas%2F5.2.x%2Finstallation%2FConfiguration-Properties.html%23http-web-requests&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062246515&sdata=IKLl2ppDakqexWeIjlAUhXNKmoYbN8HcSZ6a9Ikmttg%3D&reserved=0> shows how to enable them, but there's no explanation of what the following attributes mean: # cas.httpWebRequest.cors.enabled=false # cas.httpWebRequest.cors.allowCredentials=false # cas.httpWebRequest.cors.allowOrigins[0]= # cas.httpWebRequest.cors.allowMethods[0]=* # cas.httpWebRequest.cors.allowHeaders[0]=* # cas.httpWebRequest.cors.maxAge=3600 # cas.httpWebRequest.cors.exposedHeaders[0]= We really only need this for one service. Is there a way to enable it, or allow it, per-service? What do all of the other attribute represent? Thanks, Aaron Bennett --- Aaron Bennett Manager of Systems Administration Clark University ITS -- - Website: https://apereo.github.io/cas<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapereo.github.io%2Fcas&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062256533&sdata=rJwk1%2B0w%2BZnIAs0WrysJP8ZEaJtj9cg7O%2B0heuO4nWo%3D&reserved=0> - Gitter Chatroom: https://gitter.im/apereo/cas<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitter.im%2Fapereo%2Fcas&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062256533&sdata=uTjoYiGGFXfL8Y%2FVHkqC%2BHB2HOncyjxufWFV%2FIC%2FuyY%3D&reserved=0> - List Guidelines: https://goo.gl/1VRrw7<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2F1VRrw7&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062266534&sdata=hC96k25ds%2FQ67HUronk7aBHOV9URp8f%2F7fjoTR4JMXg%3D&reserved=0> - Contributions: https://goo.gl/mh7qDG<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2Fmh7qDG&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062266534&sdata=PRCwnFLnu2p8DSEd%2FpY1Fel0Ul74vZSIZACa4hdh6cM%3D&reserved=0> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:cas-user%[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/BN6PR03MB3169D7496166D5A91F1A1133A17B0%40BN6PR03MB3169.namprd03.prod.outlook.com<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fa%2Fapereo.org%2Fd%2Fmsgid%2Fcas-user%2FBN6PR03MB3169D7496166D5A91F1A1133A17B0%2540BN6PR03MB3169.namprd03.prod.outlook.com&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062276543&sdata=b3UCvPEueGF5UZSl1lKwPFc16HimdDSEob0nstxR38s%3D&reserved=0>. -- - Website: https://apereo.github.io/cas<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapereo.github.io%2Fcas&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062276543&sdata=xv87OHpXCuQGyaSXt%2FkBtisNf7sJTRyJUKeng6c%2BBRQ%3D&reserved=0> - Gitter Chatroom: https://gitter.im/apereo/cas<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitter.im%2Fapereo%2Fcas&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062286543&sdata=PtWZPcSROnZ7%2Bnv11OeqLLGKD09rfY3gDVsFVss5RUY%3D&reserved=0> - List Guidelines: https://goo.gl/1VRrw7<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2F1VRrw7&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062296557&sdata=FTku%2F22oLjhWzZU57ibVWWlINt%2B2JD2OwCwrprteGgY%3D&reserved=0> - Contributions: https://goo.gl/mh7qDG<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoo.gl%2Fmh7qDG&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062296557&sdata=ROQh%2Fq5JLq42eQPzWzuIpUg%2BNPmSiQO8rcGdBmAD9a4%3D&reserved=0> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAWVSYRN-O_cN6LfXvH1aGPHOz7m3BNQQFbdcDyJ6hXE2x9CKQ%40mail.gmail.com<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fa%2Fapereo.org%2Fd%2Fmsgid%2Fcas-user%2FCAAWVSYRN-O_cN6LfXvH1aGPHOz7m3BNQQFbdcDyJ6hXE2x9CKQ%2540mail.gmail.com%3Futm_medium%3Demail%26utm_source%3Dfooter&data=02%7C01%7Cabennett%40clarku.edu%7C0d8dcd7f7a4348b1ebf408d69c32bca2%7Cb5b2263d68aa453eb972aa1421410f80%7C1%7C0%7C636868139062306566&sdata=7tEHFdB94KbWuflOWnfkhWYz36nY1gFgJ0oNIOSjyZw%3D&reserved=0>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/BN6PR03MB316923D63800360C40CFB06EA1720%40BN6PR03MB3169.namprd03.prod.outlook.com.
