| <!DOCTYPE html> |
| <html lang="en"> |
| <head> |
| <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> |
| <title> CORS support added to Allura |
| </title> |
| <meta charset="utf-8"> |
| <meta name="description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects."> |
| <meta name="keywords" content=""> |
| <meta name="author" content=""> |
| <link rel="canonical" href="http://allura.apache.org"> |
| |
| <!-- Facebook Meta Info--> |
| <meta property="og:url" content="http://allura.apache.org"> |
| <meta property="og:image" content="http://allura.apache.org/theme/img/logo-asf-apache.png"> |
| <meta property="og:description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects."> |
| <meta property="og:title" content="Apache Allura"> |
| <meta property="og:site_name" content="Apache Allura"> |
| <meta property="og:see_also" content="http://allura.apache.org"> |
| |
| <!-- Twitter Meta Info--> |
| <meta name="twitter:card" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects."> |
| <meta name="twitter:url" content="http://allura.apache.org"> |
| <meta name="twitter:title" content="Apache Allura"> |
| <meta name="twitter:description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects."> |
| <meta name="twitter:image" content="http://allura.apache.org/theme/img/logo-asf-apache.png"> |
| |
| <!-- Google+ Meta Info--> |
| <meta itemprop="name" content="Apache Allura"> |
| <meta itemprop="description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects."> |
| <meta itemprop="image" content="http://allura.apache.org/theme/img/logo-asf-apache.png"> |
| |
| <link rel="stylesheet" type="text/css" href="http://allura.apache.org/theme/css/flex.min.css"> |
| <link rel="stylesheet" type="text/css" href="http://allura.apache.org/theme/css/style.css"> |
| |
| |
| </head> |
| |
| <body cz-shortcut-listen="true" class="pg-"> |
| <section id="content_wrapper" class="mobile-desktop row"> |
| <div id="header" class="row "> |
| <header id="login_header" class="row"> |
| <div class="bg-shadow pad-vert-md"> |
| <span><h1 class="text-center"><a href="http://allura.apache.org">Apache <img src="http://allura.apache.org/theme/img/logo_white.png" width="94"> Allura<span class="tm">™</span></a></h1></span> |
| <span></span> |
| <h6 class="text-center">Open source project hosting platform</h6> |
| </div> |
| </header> |
| </div> |
| |
| <div class="row bg-white pad-vert-lg"> |
| <div class="row"> |
| <h3 class="text-black text-center">CORS support added to Allura</h3> |
| </div> |
| |
| <div class="post-info text-center"> |
| Published: |
| <abbr class="published" title="2015-07-24T00:00:00+00:00"> |
| Fri 24 July 2015 |
| </abbr> |
| <br> |
| Tagged: |
| <a href="http://allura.apache.org/tag/feature.html">feature</a> |
| </div> |
| |
| <div class="row"> |
| <div class="col-20 no-float auto-margin"> |
| <div class="row"> |
| <div class="pad-md text-black"><p>The latest Allura code now supports CORS http headers. It will be included in the next release of Allura, |
| or is available now by using the latest code from <code>git</code>.</p> |
| <p><a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS">CORS headers</a> allow JavaScript running on other sites |
| to access the Allura APIs. By default, browser's Same Origin Policy would prevent that. CORS is still secure, because Allura's |
| authenticate is in place. APIs that require authorization still require it. OAuth or OAuth tokens can be used, |
| cookies cannot be used - so nobody could be tricked into doing something accidentally.</p> |
| <p>To enable this and allow more sites to integrate with Allura, see the <code>cors.*</code> settings in your <code>development.ini</code> file.</p></div> |
| </div> |
| </div> |
| </div> |
| </div> |
| |
| <div class="row"> |
| <footer id="footer" class="bg-black text-white col-24"> |
| <p class="copy pad-top-sm text-center">Copyright © 2015 The Apache Software Foundation, Licensed under |
| <a href="http://www.apache.org/licenses/LICENSE-2.0.html">the Apache License, Version 2.0.</a></p> |
| <p class="copy pad-bot-sm text-center">Apache, Allura, Apache Allura, and the Apache feather logo are trademarks of The Apache Software Foundation.</p> |
| </footer> |
| </div> |
| </section> |
| |
| <script type="application/javascript" src="http://allura.apache.org/theme/js/jquery-1.11.2.min.js"></script> |
| <script type="application/javascript" src="http://allura.apache.org/theme/js/frontend.js"></script> |
| <!-- Credits |
| |
| Logo Design: Will Leonard |
| http://willleonard.org |
| |
| Site design: Perry Merrity |
| http://perrymerrity.com/ |
| |
| bg-header-forge.jpg |
| Photo by: Stefan Schmitz |
| https://creativecommons.org/licenses/by-nd/2.0 |
| |
| bg-developers-fire.jpg |
| Photo by: Frédéric Bisson |
| https://creativecommons.org/licenses/by-nd/2.0 |
| --> |
| </body> |
| </html> |
