Bug #7024
closed
XMLHttpRequests sent to /cn/v2/resolve/ blocked since it is redirected to a cross-origin resource
Added by Lauren Walker over 8 years ago.
Updated over 8 years ago.
Description
This is blocking private downloads in the Dataone theme
- Status changed from New to Resolved
Original error msg from console: XMLHttpRequest cannot load https://cn-stage-2.test.dataone.org/cn/v2/resolve/knb.22.1. The request was redirected to 'https://dev.nceas.ucsb.edu/knb/d1/mn/v2/object/knb.22.1', which is disallowed for cross-origin requests that require preflight.
When the UI is being used with a CN (dataone theme), and the user is logged in and downloading data with their auth token, construct the URL from the member node base URL rather than use the resolve service. If credentials are sent to the resolve service, the request is blocked since it is redirected to a cross-origin resource.
Also available in: Atom
PDF