{"type":"doc","content":[{"type":"layoutSection","content":[{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"paragraph","content":[{"text":"Table of Contents","type":"text","marks":[{"type":"strong"}]}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"minLevel":{"value":"2"},"maxLevel":{"value":"2"},"outline":{"value":"false"},"style":{"value":"disc"},"type":{"value":"list"},"printable":{"value":"true"}},"macroMetadata":{"macroId":{"value":"61238332-bf9b-4488-b70b-6e3bac86513a"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"c4d3f7d6-82a9-4778-af33-6fd7dc6cffa8"}}]},{"type":"layoutColumn","attrs":{"width":66.66},"content":[{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"About CORS","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"CORS can be configured to allow web-browser based clients on other domains to access the CollectionSpace REST API.","type":"text"}]},{"type":"paragraph"}]}]}]},{"type":"rule"},{"type":"heading","attrs":{"level":2},"content":[{"text":"Creating a file to store local configuration","type":"text"}]},{"type":"paragraph","content":[{"text":"Your configuration file should be placed in the ","type":"text"},{"text":"$CSPACE_JEESERVER_HOME/cspace/config/services/local","type":"text","marks":[{"type":"code"}]},{"text":" directory on the CollectionSpace server.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create the ","type":"text"},{"text":"local","type":"text","marks":[{"type":"code"}]},{"text":" directory if it does not exist.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Inside that directory, create a file with any name of your choosing, ending with","type":"text"},{"text":".xml","type":"text","marks":[{"type":"code"}]},{"text":"; for example, ","type":"text"},{"text":"services-config-cors.xml","type":"text","marks":[{"type":"code"}]},{"text":". This local configuration file will be merged with the","type":"text"},{"text":"services-config.xml","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"services-config-security.xml","type":"text","marks":[{"type":"code"}]},{"text":" files, found in ","type":"text"},{"text":"$CSPACE_JEESERVER_HOME/cspace/config/services","type":"text","marks":[{"type":"code"}]},{"text":". You may add more than one ","type":"text"},{"text":".xml","type":"text","marks":[{"type":"code"}]},{"text":" file to the ","type":"text"},{"text":"local","type":"text","marks":[{"type":"code"}]},{"text":" directory if you want to split your configuration into multiple files. If more than one ","type":"text"},{"text":".xml","type":"text","marks":[{"type":"code"}]},{"text":" file is present in ","type":"text"},{"text":"local","type":"text","marks":[{"type":"code"}]},{"text":", the files are merged into the configuration in alphabetical order.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add configuration to your file(s), following the example and instructions below.","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"Your local configuration is merged with the default configuration files when CollectionSpace starts. For debugging, the output of the merge is written to ","type":"text"},{"text":"$CSPACE_JEESERVER_HOME/cspace/config/services/service-config.merged.xml","type":"text","marks":[{"type":"code"}]}]}]},{"type":"rule"},{"type":"heading","attrs":{"level":2},"content":[{"text":"CORS configuration settings","type":"text"}]},{"type":"paragraph","content":[{"text":"Your merged XML file must conform to the XML schema at ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://github.com/collectionspace/services/blob/v8.0-branch/services/config/src/main/resources/service-config.xsd"}},{"text":" . That schema defines the ","type":"text"},{"text":"security/cors","type":"text","marks":[{"type":"code"}]},{"text":" element that contains the configuration for CORS.","type":"text"}]},{"type":"paragraph","content":[{"text":"The following example shows a typical CORS configuration file:","type":"text"}]},{"type":"codeBlock","content":[{"text":"\n\n \n \n https://cspace.example.org\n https://another.example.org\n P1D\n \n \n","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"The merge result can be fine tuned by adding attributes from the ","type":"text"},{"text":"merge","type":"text","marks":[{"type":"code"}]},{"text":" namespace defined in the example. In most cases, the default merge behavior (no merge attributes, as above) is sufficient. See the ","type":"text"},{"text":"XmlMerge documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://github.com/collectionspace/services/blob/master/services/common/src/main/cspace/config/services/tenants/XMLMerge-README.pdf"}}]},{"text":" for details.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"Some important elements inside ","type":"text"},{"text":"cors","type":"text","marks":[{"type":"code"}]},{"text":" include:","type":"text"}]},{"type":"paragraph","content":[{"text":"allowed-origin","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"An origin for which cross-origin requests are allowed. Multiple ","type":"text"},{"text":"allowed-origin","type":"text","marks":[{"type":"code"}]},{"text":" elements can be used to specify multiple origins.","type":"text"}]},{"type":"paragraph","content":[{"text":"max-age","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"How long, as a duration, the response from a pre-flight request can be cached by clients. Specified in ISO-8601 duration format: ","type":"text"},{"text":"PnDTnHnMn.nS","type":"text","marks":[{"type":"code"}]}]},{"type":"rule"}],"version":1}

Browser not supported