Send Core Signature API Call via WebReport

patrick_bisaillon@gov.nt.ca · 2022-03-08T18:00:59+00:00

There was an error rendering this rich post.

patrick_bisaillon@gov.nt.ca

Just wondering if anybody has been able to setup a WebReport within Content Server to successfully make an API call to the Core Signature Service without receiving the CORS error?

Just trying a simple one for now, but can't get past the CORS policy

Access to XMLHttpRequest at 'https://sign.core.opentext.ca/api/v1/allowed-file-types/?_=1646762286829' from origin 'https://xxxxx' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Thanks,

Patrick

Find more posts tagged with

Comments

Appu Nair

Does that rest api code work with postman?

wr.txt

patrick_bisaillon@gov.nt.ca

Yes, I can get it to work fine in Postman, but i'm just trying setup a webreport in Content Server to be able to make API calls to the Core Sign API.

wr.txt

Appu Nair

WR as a RESTClient or AJAX?

wr.txt

patrick_bisaillon@gov.nt.ca

Have been trying to use AJAX. I attached what is being used in the webreport. Thanks.

wr.txt

Appu Nair

I don't have the subscriptions but what I would have tried is look in your code and see how the Postman code constructs that payload .Most likely that is what you are having as your WR but worth a second look. The CORS error happen because most likely CS is thinking it is an attack vector and some solace can be obtained by basically playing with these settings

CS Server many of these are deprecated and is in OTDS now ?func=admin.securityvars I find these to be playing some role try with CORS(click help for this page when you are in that)

if the call is not hitting OTDS because if you are in WR the OTDS vetting has happened

That looks promising to me OT is notorious in not providing full set of instructions :)

CORS

To allow resources within a Cross-Origin Resource Sharing (CORS) domain to access the REST API, enter the URL of the domain in the Trusted domain box.

Good luck

wr.txt