Project

General

Profile

Actions
Copy link

Bug #7024

closed

XMLHttpRequests sent to /cn/v2/resolve/ blocked since it is redirected to a cross-origin resource

Added by Lauren Walker almost 8 years ago. Updated almost 8 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Lauren Walker
Target version:
1.11.2
Start date:
05/11/2016
Due date:
% Done:

0%

Estimated time:
Bugzilla-Id:

Description

This is blocking private downloads in the Dataone theme

Actions
Copy link
 #1

Updated by Lauren Walker almost 8 years ago

  • Status changed from New to Resolved

Original error msg from console: XMLHttpRequest cannot load https://cn-stage-2.test.dataone.org/cn/v2/resolve/knb.22.1. The request was redirected to 'https://dev.nceas.ucsb.edu/knb/d1/mn/v2/object/knb.22.1', which is disallowed for cross-origin requests that require preflight.

When the UI is being used with a CN (dataone theme), and the user is logged in and downloading data with their auth token, construct the URL from the member node base URL rather than use the resolve service. If credentials are sent to the resolve service, the request is blocked since it is redirected to a cross-origin resource.

Actions
Copy link

Also available in: Atom PDF