-
Notifications
You must be signed in to change notification settings - Fork 67
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
am(cors): domain level CORS doc #1010
base: master
Are you sure you want to change the base?
Conversation
Kudos, SonarCloud Quality Gate passed! 0 Bugs No Coverage information |
= CORS Configuration | ||
:page-sidebar: am_3_x_sidebar | ||
:page-permalink: am/current/am_userguide_cors_configuration.html | ||
:page-folde![](../../../../../../../../../Desktop/graviteeio-am-userguide-cors-default.png)r: am/user-guide |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
:page-folde![](../../../../../../../../../Desktop/graviteeio-am-userguide-cors-default.png)r: am/user-guide | |
:page-folder: am/user-guide |
=== Access-Control-Allow-Origin | ||
|
||
Allow to specify one or multiples origin(s) that may access the resource. | ||
If you want to allow all origins, you can put `*` but it's not safe for production. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If you want to allow all origins, you can put `*` but it's not safe for production. | |
If you want to allow all origins, you can put `*` but this is not safe for production. |
Here you specify the headers allowed to be used by your requests. | ||
Typically, on your request headers you will have a header `Access-Control-Request-Headers` which request CORS to be configured to allow its values. | ||
|
||
Let's see a simple use case: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's see a simple use case: | |
==== Simple use case |
|
||
Here is the screenshot of these variables from the `gravitee.yml` file | ||
|
||
image::{% link images/am/current/graviteeio-am-userguide-cors-settings-yml.png %}[Gateway CORS defailt settings,500,400] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why use a screenshot (which I find difficult to read) when you could just copy and paste an example directly from the gravitee.yml
file?
This documentation is for 3.21.x domain level CORS configuration
🚀 CI was able to deploy the build of this PR, so you can now try it directly here