[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-12-02 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-30 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 --- Comment #6 from Mark Thomas --- Drat. The filter chain is populated later in the request processing chain than I thought it was. I'm looking into alternatives for the "If the CORS filter is present" option. -- You are receiving this mail

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-27 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 --- Comment #5 from Michael Osipov --- (In reply to Mark Thomas from comment #4) > Corrected attribute name noted. > > From a Valve we should be able to look into the FilterChain so see if our > CORS valve is present. For other implementations

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-27 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 --- Comment #4 from Mark Thomas --- Corrected attribute name noted. >From a Valve we should be able to look into the FilterChain so see if our CORS valve is present. For other implementations the user would have to set it manually. If there ar

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-26 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 --- Comment #3 from Michael Osipov --- (In reply to Mark Thomas from comment #1) > allowCorsPreFlight looks like a reasonable attribute name. > > I'd suggest, if it is possible without too much jumping through hoops, it > defaults to true in t

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-26 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 --- Comment #2 from Michael Osipov --- (In reply to Mark Thomas from comment #1) > allowCorsPreFlight looks like a reasonable attribute name. > > I'd suggest, if it is possible without too much jumping through hoops, it > defaults to true in t

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-26 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 --- Comment #1 from Mark Thomas --- allowCorsPreFlight looks like a reasonable attribute name. I'd suggest, if it is possible without too much jumping through hoops, it defaults to true in the presence of the CORSFilter and false otherwise. -

[Bug 63937] CORS preflight request not possible on authenticated endpoints

2019-11-19 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=63937 Michael Osipov changed: What|Removed |Added CC||micha...@apache.org -- You are recei