19. JBoss CORS(Cross-Origin Resource Sharing) 설정

https://access.redhat.com/solutions/6974809

How to enable Cross-Origin Resource Sharing (CORS) in JBoss EAP - Red Hat Customer Portal

 

 

JBoss 어플리케이션 호출시 아래와 같이 CORS 에러 발생

Access to XMHttpRequest at ‘http://10.20.30.40:8081/test/app/server’ from origin ‘http://10.30.40.50:7070’ has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No ‘Access-Control-Allow-Origin' header is present on the requested resource

 

위 내용은 web서버에서 조치할 수도 있지만 was서버에서 조치하는 방법도 있음

 

---

 

1. Undertow response headers 설정

/subsystem=undertow/configuration=filter/response-header=Access-Control-Allow-Origin:add(header-name="Access-Control-Allow-Origin",header-value="redhat.com")

/subsystem=undertow/configuration=filter/response-header=Access-Control-Allow-Credentials:add(header-name="Access-Control-Allow-Credentials",header-value="false")

/subsystem=undertow/configuration=filter/response-header=Access-Control-Allow-Methods:add(header-name="Access-Control-Allow-Methods",header-value="GET, POST, PUT")

/subsystem=undertow/configuration=filter/response-header=Access-Control-Allow-Headers:add(header-name="Access-Control-Allow-Headers",header-value="accept, authorization, content-type, x-requested-with")

/subsystem=undertow/configuration=filter/response-header=Access-Control-Max-Age:add(header-name="Access-Control-Max-Age",header-value="1")

 

2. header enable

/subsystem=undertow/server=default-server/host=default-host/filter-ref=Access-Control-Allow-Origin:add()")

/subsystem=undertow/server=default-server/host=default-host/filter-ref=Access-Control-Allow-Credentials:add()")

/subsystem=undertow/server=default-server/host=default-host/filter-ref=Access-Control-Allow-Methods:add()")

/subsystem=undertow/server=default-server/host=default-host/filter-ref=Access-Control-Allow-Headers:add()")

/subsystem=undertow/server=default-server/host=default-host/filter-ref=Access-Control-Max-Age:add()")