Login Request Fails

[EliJDonahue]

Caused by CORS (cross-origin resource sharing). Source code needs to be updated to include cross origin headers in requests.

In the meantime, here are possible workarounds:

1. Disabling CORS in the browser.
2. Using a browser add-on to allow CORS.
3. Use a proxy.

My chosen workaround while testing and documenting the add-in is to run Chrome via command prompt with the --disable-web-security flag:

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --disable-web-security --user-data-dir="c:/chromedev"

Note: Disabling browser security is not recommended for production scenarios.

[EliJDonahue]

The following steps will also avoid the CORS error:

1. Open the IIS Manager.
2. Select your Aras Innovator instance from the site list in the Connections pane.
3. In the center pane, select HTTP Response Headers from the IIS section.
4. In the Actions pane on the right, select Add…
5. Add a header with the following values:
   • Name: Access-Control-Allow-Headers
   • Value: database, authpassword, authuser, soapaction, content-type
6. Click Add… again and add another header with the following values:
   • Name: Access-Control-Allow-Origin
   • Value: https domain to whitelist or *