23 CORS Properties in the Satellite Server JSON File

The following topics provide information about the CORS category and the properties categorized under CORS in the Satellite Server wcs_properties.json file:

23.1 About the CORS Properties in the Satellite Server JSON File

The CORS properties in the Satellite Server wcs_properties.json file correlate to the CORS properties in the WebCenter Sites wcs_properties.json file.

The properties that configure the Cross-Origin Resource Sharing (CORS) mechanism for Satellite Server are categorized under the CORS category. These properties allow resources to be requested from domains outside of the WebCenter Sites domain.

When a request from a domain outside of WebCenter Sites is made for a WebCenter Sites resource, the browser "preflights" the request by soliciting supported domain methods from WebCenter Sites with an HTTP OPTIONS request header. Upon approval from WebCenter Sites, CORS sends the request with the HTTP request method. WebCenter Sites can also notify clients whether "credentials" (including Cookies and HTTP Authentication data) should be sent with requests.

23.2 Properties in the CORS Category in the Satellite Server JSON File

The following table provides a description for each CORS-related property in the Satellite Server wcs_properties.json file.

Table 23-1 Properties in the CORS Category in the Satellite Server JSON File

Property Description

cors.allowCredentials

Specifies whether user credentials, such as cookies, HTTP authentication, or client-side certificates are supported in cross origin requests (CORS).

Default value: false

cors.allowOrigin

Comma-separated list of origins (in the format: <scheme>://<host>:<port>) that are allowed to access WebCenter Sites resources from a domain other than the WebCenter Sites domain.

Default value: * which allows any domain to access WebCenter Sites resources.

cors.maxAge

Use this property to specify an integer that indicates the maximum amount of time the results of a preflight request can be cached by the client.

cors.supportedMethods

Defines the cross domain request HTTP methods supported by WebCenter Sites.

Default value: GET, HEAD, POST, OPTIONS