Bug #8798
Story #8796: Various issues with service access after upgrade to 18.04
Issue with download all CORS error
Start date:
2019-05-15
Due date:
% Done:
100%
Milestone:
None
Product Version:
*
Story Points:
Sprint:
Description
Rossdm reported on slack:
Hi @roger, I think there's been a regression - the "Download All" link used to work but now it's running into an `Access-Control-Allow-Origin` error. https://search.dataone.org/view/10.24431_rw1k31v_201947202918 Access to XMLHttpRequest at 'https://dataone.researchworkspace.com/mn/v2/packages/application%2Fbagit-097/25cb14a4-2764-42c7-95d0-82a3ad277eab' from origin 'https://search.dataone.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.
History
#1 Updated by Jing Tao over 5 years ago
If you click the download button at this page:
https://search.dataone.org/view/doi:10.5063/F15X2773
It works. So I am thinking the member nodes's apache configuration has the CORS issue.
#2 Updated by Roger Dahl over 5 years ago
- % Done changed from 0 to 100
- Status changed from New to Closed
You were right Jing, it was a CORS issue in GMN. Fixed.
