Story #8796: Various issues with service access after upgrade to 18.04
Issue with download all CORS error
Rossdm reported on slack:
Hi @roger, I think there's been a regression - the "Download All" link used to work but now it's running into an `Access-Control-Allow-Origin` error. https://search.dataone.org/view/10.24431_rw1k31v_201947202918 Access to XMLHttpRequest at 'https://dataone.researchworkspace.com/mn/v2/packages/application%2Fbagit-097/25cb14a4-2764-42c7-95d0-82a3ad277eab' from origin 'https://search.dataone.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.
#1 Updated by Jing Tao over 4 years ago
If you click the download button at this page:
It works. So I am thinking the member nodes's apache configuration has the CORS issue.