Cannot access client library from a website hosted elsewhere (cross domain requests)

[0xnbk]

It is not possible to embed a sharejs pad in a website hosted elsewhere. This may be because of the same origin policy.

[josephg]

The most recent version of browserchannel in git enables cross-origin requests by default. For now, you can use that. I haven't pushed to npm yet because I'm not entirely comfortable with it. (Obviously, cross-origin requests are a security problem).

[0xnbk]

Great, Let me try it with new version of Browser channel. Thanks for pointing it out :) It would be of great use, if sharejs can be embedded on any web page !

[josephg]

I've updated browserchannel to support this behind a flag. Set cors:"*" in the browserchannel server's options. (Ie, browserChannel:{cors:"*"} in your shareJS options object).

(Actually, don't use *. Whatever you put there will be sent as the Access-Control-Allow-Origin header. See this: https://developer.mozilla.org/en/http_access_control )

[0xnbk]

Ok thanks, thats working fine now :)

[Jakobud]

Can you explain how to set this up? The Client API page (https://github.com/share/ShareJS/wiki/Client-API) doesn't say anything about how to setup cross origin stuff in the options. I tried this:

var options = {
  origin: "http://my-share-js-server.com:8000",
  browserChannel:{cors:"*"}
}

var connection = sharejs.open('test', 'text', options, function(error, doc) {
  doc.attach_textarea(elem);
});

But I still get:

XMLHttpRequest cannot load http://my-share-js-server.com:8000/test?VER=8&MODE=init&zx=rn7vnzguldwv&t=1. Origin http://www.mywebsite.com is not allowed by Access-Control-Allow-Origin. 

I even added this to my .htaccess but it didn't make a difference:

<IfModule mod_headers.c>
  Header set Access-Control-Allow-Origin "*"
</IfModule>

[Jakobud]

Just realized that the browserChannel config option needs to be on the server, duh. This is what I have, still not working:

var connect = require('connect');
var sharejs = require('share').server;

var server = connect(
    connect.logger(),
    connect.static(__dirname + '/public')
);

var options = {
    db: { type: 'none' },
    browserChannel: { cors:"*" }
};

sharejs.attach(server, options);

server.listen(8000, function()
{
    console.log("ShareJS Server started.");
});

This is using ShareJS installed from npm: npm install share@0.6.3

Any help would be appreciated.

[0xnbk]

Try adding browserChannel: { cors:"*" } in bin/options.js. It should work.

[Jakobud]

Fixed here: #228