-
Notifications
You must be signed in to change notification settings - Fork 109
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cors domain filter #715
Cors domain filter #715
Conversation
response filtering only to 3rd party server only.
# Conflicts: # jaxrs-service/src/main/java/com/quorum/tessera/api/filter/LoggingFilter.java
jersey. Add CORS filter but still pending confirmation on matching logic.
- match wildcards - match exact matches. Add defaults for additional cors configs and pass through to headers.
Codecov Report
@@ Coverage Diff @@
## master #715 +/- ##
=========================================
Coverage 99.49% 99.49%
Complexity 1879 1879
=========================================
Files 287 286 -1
Lines 5583 5583
Branches 282 281 -1
=========================================
Hits 5555 5555
Misses 5 5
Partials 23 23
Continue to review full report at Codecov.
|
server/jersey-server/src/main/java/com/quorum/tessera/server/JerseyServer.java
Show resolved
Hide resolved
@@ -39,12 +53,22 @@ public void onTearDown() throws Exception { | |||
|
|||
@Test | |||
public void ping() { | |||
|
|||
MultivaluedMap<String, Object> headers = new MultivaluedHashMap<>(); | |||
headers.add("Origin", "*.acme.com"); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
wow - I was not expecting wildcards in the Origin header... I would always have expected that the Origin is exactly the site name from where the script attempting the CORS request has been downloaded.
Linked issue: #709 |
Includes moving filter creation for common filters into jersey server module.