On 21/06/12 17:52, semecxf wrote:
I have authentication class which implements
org.apache.cxf.jaxrs.ext.RequestHandler to do authentication.
My code works fine, except with cors.
In cors request (AuthorizationPolicy)message.get(AuthorizationPolicy.class)
returns null therefore I can't get user name and password.

Any body knows how cors and http basic authentication work?

this entry provides some useful info:
http://avalanche123.com/blog/2011/10/10/cross-domain-javascript-lessons-learned/

By the way, we may need to enhance the CXF CORS filter to return 'Access-Control-Allow-Credentials: true' if it's configured to enforce BasicAuth and no AuthorizationPolicy is available.

Sergey

--
View this message in context: 
http://cxf.547215.n5.nabble.com/CORS-and-Http-Basic-Authentication-tp5710112.html
Sent from the cxf-user mailing list archive at Nabble.com.


--
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/

Blog: http://sberyozkin.blogspot.com

Reply via email to