Re: [osgi-dev] Enroute Rest

2016-11-10 Thread Peter Kriens 
You must be doing something weird since CORS is only an issue when the browser 
gets an index.html file from a different server than the server serving the 
REST call.

That is of course fine but that is a relatively advanced use case that requires 
you to understand CORS and its security implications.

That said, there is a configuration option on the simple webserver bundle that 
sets the CORS headers. See the osgi.enroute.webserver.simple project in the 
osgi.enroute.bundles repository on Github.

Kind regards,

Peter Kriens





> On 10 nov. 2016, at 12:32, <manoj.vrajam...@wipro.com> 
> <manoj.vrajam...@wipro.com> wrote:
> 
> Hi All,
>  
> I am getting the following error when I run my App which is based on 
> getUpper() QS tutorial (REST API)
>  
> No 'Access-Control-Allow-Origin' header is present on the requested resource. 
>  Can we get this enabled from the REST HTTP Server side or is there any other 
>  better solution to get rid of this CORS (Cross Origin Resource Sharing) 
> issue ?
>  
> Please advise.. Thanks..
>  
> -Manoj
> From: Manoj Venkatesh Rajamani (Product Engineering Service) 
> Sent: 10 November 2016 10:48
> To: OSGi Developer Mail List <osgi-dev@mail.osgi.org 
> <mailto:osgi-dev@mail.osgi.org>>
> Subject: RE: [osgi-dev] Enroute Rest
>  
> · Do we have option to set HTTP Header set 
> Access-Control-Allow-Origin "*"  on the Jetty side of Enroute (by any 
> chance?) !!! 
> · Can we ignore CORS altogether. I tried many options from the 
> Firefox/Ubuntu side (both setting/ignoring) and still it fails…
> · I have a feeling that this needs some tweak on the server-side 
> (Enroute rest) ? Please correct/advise me..
>  
> From: osgi-dev-boun...@mail.osgi.org <mailto:osgi-dev-boun...@mail.osgi.org> 
> [mailto:osgi-dev-boun...@mail.osgi.org 
> <mailto:osgi-dev-boun...@mail.osgi.org>] On Behalf Of Neil Bartlett
> Sent: 09 November 2016 17:24
> To: OSGi Developer Mail List <osgi-dev@mail.osgi.org 
> <mailto:osgi-dev@mail.osgi.org>>
> Subject: Re: [osgi-dev] Enroute Rest
>  
> ** This mail has been sent from an external source **
> 
> You can read about CORS here: 
> https://en.wikipedia.org/wiki/Cross-origin_resource_sharing 
> <https://en.wikipedia.org/wiki/Cross-origin_resource_sharing>
>  
> Regards,
> Neil
>  
>  
>  
> On 9 Nov 2016, at 11:51, <manoj.vrajam...@wipro.com 
> <mailto:manoj.vrajam...@wipro.com>> <manoj.vrajam...@wipro.com 
> <mailto:manoj.vrajam...@wipro.com>> wrote:
>  
> Hi All,
>  
> I am trying to retrieve an http response (json string) from an osgi app 
> implementing enroute rest api. 
>  
> When i write a client html app and invoke the osgi app, it gets invoked and 
> returns the string. But I get a warning as below and I am unable to see the 
> text in my browser page.
>  
> Cross-Origin Request Blocked: The Same Origin Policy disallows reading the 
> remote resource at http://127.0.0.1:8080/rest/execute/app/foo 
> <http://127.0.0.1:8080/rest/execute/app/foo> (Reason: CORS header 
> 'Access-Control-Allow-Origin' missing). 
>  
> Does this have anything to do with the http response header in the enroute 
> rest ? Would appreciate any quick solution/pointers..  
>  
> Thanks,
> Manoj
> The information contained in this electronic message and any attachments to 
> this message are intended for the exclusive use of the addressee(s) and may 
> contain proprietary, confidential or privileged information. If you are not 
> the intended recipient, you should not disseminate, distribute or copy this 
> e-mail. Please notify the sender immediately and destroy all copies of this 
> message and any attachments. WARNING: Computer viruses can be transmitted via 
> email. The recipient should check this email and any attachments for the 
> presence of viruses. The company accepts no liability for any damage caused 
> by any virus transmitted by this email. www.wipro.com <http://www.wipro.com/> 
> ___
> OSGi Developer Mail List
> osgi-dev@mail.osgi.org <mailto:osgi-dev@mail.osgi.org>
> https://mail.osgi.org/mailman/listinfo/osgi-dev 
> <https://mail.osgi.org/mailman/listinfo/osgi-dev>
>  
> The information contained in this electronic message and any attachments to 
> this message are intended for the exclusive use of the addressee(s) and may 
> contain proprietary, confidential or privileged information. If you are not 
> the intended recipient, you should not disseminate, distribute or copy this 
> e-mail. Please notify the sender immediately and destroy all copies of this 
> message and any attachments. WARNING: Comp

Re: [osgi-dev] Enroute Rest

2016-11-10 Thread manoj.vrajamani 
Hi All,

I am getting the following error when I run my App which is based on getUpper() 
QS tutorial (REST API)

No 'Access-Control-Allow-Origin' header is present on the requested resource.  
Can we get this enabled from the REST HTTP Server side or is there any other  
better solution to get rid of this CORS (Cross Origin Resource Sharing) issue ?

Please advise.. Thanks..

-Manoj
From: Manoj Venkatesh Rajamani (Product Engineering Service)
Sent: 10 November 2016 10:48
To: OSGi Developer Mail List <osgi-dev@mail.osgi.org>
Subject: RE: [osgi-dev] Enroute Rest


* Do we have option to set HTTP Header set Access-Control-Allow-Origin 
"*"  on the Jetty side of Enroute (by any chance?) !!!

* Can we ignore CORS altogether. I tried many options from the 
Firefox/Ubuntu side (both setting/ignoring) and still it fails...

* I have a feeling that this needs some tweak on the server-side 
(Enroute rest) ? Please correct/advise me..

From: osgi-dev-boun...@mail.osgi.org<mailto:osgi-dev-boun...@mail.osgi.org> 
[mailto:osgi-dev-boun...@mail.osgi.org] On Behalf Of Neil Bartlett
Sent: 09 November 2016 17:24
To: OSGi Developer Mail List 
<osgi-dev@mail.osgi.org<mailto:osgi-dev@mail.osgi.org>>
Subject: Re: [osgi-dev] Enroute Rest


** This mail has been sent from an external source **
You can read about CORS here: 
https://en.wikipedia.org/wiki/Cross-origin_resource_sharing

Regards,
Neil



On 9 Nov 2016, at 11:51, 
<manoj.vrajam...@wipro.com<mailto:manoj.vrajam...@wipro.com>> 
<manoj.vrajam...@wipro.com<mailto:manoj.vrajam...@wipro.com>> wrote:

Hi All,

I am trying to retrieve an http response (json string) from an osgi app 
implementing enroute rest api.

When i write a client html app and invoke the osgi app, it gets invoked and 
returns the string. But I get a warning as below and I am unable to see the 
text in my browser page.

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the 
remote resource at http://127.0.0.1:8080/rest/execute/app/foo (Reason: CORS 
header 'Access-Control-Allow-Origin' missing).

Does this have anything to do with the http response header in the enroute rest 
? Would appreciate any quick solution/pointers..

Thanks,
Manoj
The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments. WARNING: Computer viruses can be transmitted via email. The 
recipient should check this email and any attachments for the presence of 
viruses. The company accepts no liability for any damage caused by any virus 
transmitted by this email. www.wipro.com<http://www.wipro.com/> 
___
OSGi Developer Mail List
osgi-dev@mail.osgi.org<mailto:osgi-dev@mail.osgi.org>
https://mail.osgi.org/mailman/listinfo/osgi-dev

The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments. WARNING: Computer viruses can be transmitted via email. The 
recipient should check this email and any attachments for the presence of 
viruses. The company accepts no liability for any damage caused by any virus 
transmitted by this email. www.wipro.com
___
OSGi Developer Mail List
osgi-dev@mail.osgi.org
https://mail.osgi.org/mailman/listinfo/osgi-dev

Re: [osgi-dev] Enroute Rest

2016-11-09 Thread manoj.vrajamani 
* Do we have option to set HTTP Header set Access-Control-Allow-Origin 
"*"  on the Jetty side of Enroute (by any chance?) !!!

* Can we ignore CORS altogether. I tried many options from the 
Firefox/Ubuntu side (both setting/ignoring) and still it fails...

* I have a feeling that this needs some tweak on the server-side 
(Enroute rest) ? Please correct/advise me..

From: osgi-dev-boun...@mail.osgi.org [mailto:osgi-dev-boun...@mail.osgi.org] On 
Behalf Of Neil Bartlett
Sent: 09 November 2016 17:24
To: OSGi Developer Mail List <osgi-dev@mail.osgi.org>
Subject: Re: [osgi-dev] Enroute Rest


** This mail has been sent from an external source **
You can read about CORS here: 
https://en.wikipedia.org/wiki/Cross-origin_resource_sharing

Regards,
Neil



On 9 Nov 2016, at 11:51, 
<manoj.vrajam...@wipro.com<mailto:manoj.vrajam...@wipro.com>> 
<manoj.vrajam...@wipro.com<mailto:manoj.vrajam...@wipro.com>> wrote:

Hi All,

I am trying to retrieve an http response (json string) from an osgi app 
implementing enroute rest api.

When i write a client html app and invoke the osgi app, it gets invoked and 
returns the string. But I get a warning as below and I am unable to see the 
text in my browser page.

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the 
remote resource at http://127.0.0.1:8080/rest/execute/app/foo (Reason: CORS 
header 'Access-Control-Allow-Origin' missing).

Does this have anything to do with the http response header in the enroute rest 
? Would appreciate any quick solution/pointers..

Thanks,
Manoj
The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments. WARNING: Computer viruses can be transmitted via email. The 
recipient should check this email and any attachments for the presence of 
viruses. The company accepts no liability for any damage caused by any virus 
transmitted by this email. www.wipro.com<http://www.wipro.com/> 
___
OSGi Developer Mail List
osgi-dev@mail.osgi.org<mailto:osgi-dev@mail.osgi.org>
https://mail.osgi.org/mailman/listinfo/osgi-dev

The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments. WARNING: Computer viruses can be transmitted via email. The 
recipient should check this email and any attachments for the presence of 
viruses. The company accepts no liability for any damage caused by any virus 
transmitted by this email. www.wipro.com
___
OSGi Developer Mail List
osgi-dev@mail.osgi.org
https://mail.osgi.org/mailman/listinfo/osgi-dev

Re: [osgi-dev] Enroute Rest

2016-11-09 Thread Neil Bartlett 
You can read about CORS here: 
https://en.wikipedia.org/wiki/Cross-origin_resource_sharing 


Regards,
Neil



> On 9 Nov 2016, at 11:51,  
>  wrote:
> 
> Hi All,
> 
> I am trying to retrieve an http response (json string) from an osgi app 
> implementing enroute rest api. 
> 
> When i write a client html app and invoke the osgi app, it gets invoked and 
> returns the string. But I get a warning as below and I am unable to see the 
> text in my browser page.
> 
> Cross-Origin Request Blocked: The Same Origin Policy disallows reading the 
> remote resource at http://127.0.0.1:8080/rest/execute/app/foo 
>  (Reason: CORS header 
> 'Access-Control-Allow-Origin' missing). 
> 
> Does this have anything to do with the http response header in the enroute 
> rest ? Would appreciate any quick solution/pointers..  
> 
> Thanks,
> Manoj
> The information contained in this electronic message and any attachments to 
> this message are intended for the exclusive use of the addressee(s) and may 
> contain proprietary, confidential or privileged information. If you are not 
> the intended recipient, you should not disseminate, distribute or copy this 
> e-mail. Please notify the sender immediately and destroy all copies of this 
> message and any attachments. WARNING: Computer viruses can be transmitted via 
> email. The recipient should check this email and any attachments for the 
> presence of viruses. The company accepts no liability for any damage caused 
> by any virus transmitted by this email. www.wipro.com  
> ___
> OSGi Developer Mail List
> osgi-dev@mail.osgi.org 
> https://mail.osgi.org/mailman/listinfo/osgi-dev 
> 
___
OSGi Developer Mail List
osgi-dev@mail.osgi.org
https://mail.osgi.org/mailman/listinfo/osgi-dev

[osgi-dev] Enroute Rest

2016-11-09 Thread manoj.vrajamani 
Hi All,


I am trying to retrieve an http response (json string) from an osgi app 
implementing enroute rest api.


When i write a client html app and invoke the osgi app, it gets invoked and 
returns the string. But I get a warning as below and I am unable to see the 
text in my browser page.


Cross-Origin Request Blocked: The Same Origin Policy disallows reading the 
remote resource at http://127.0.0.1:8080/rest/execute/app/foo (Reason: CORS 
header 'Access-Control-Allow-Origin' missing).


Does this have anything to do with the http response header in the enroute rest 
? Would appreciate any quick solution/pointers..


Thanks,

Manoj

The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately and destroy all copies of this message and 
any attachments. WARNING: Computer viruses can be transmitted via email. The 
recipient should check this email and any attachments for the presence of 
viruses. The company accepts no liability for any damage caused by any virus 
transmitted by this email. www.wipro.com
___
OSGi Developer Mail List
osgi-dev@mail.osgi.org
https://mail.osgi.org/mailman/listinfo/osgi-dev