Skip to content

CORS Settings

Jump to bottom
Mikhail Strokov edited this page Apr 1, 2019 · 5 revisions

By default, all CORS requests to the REST API are allowed. To restrict the origins list you can define the cuba.rest.allowedOrigins application property.

If the JPA Web API is attached to the portal module then modify the portal-dispatcher-spring.xml.

If the JPA Web API is included in the web module then modify the web-spring.xml:

<mvc:cors>
    <mvc:mapping path="/api/**" 
                 allowed-origins="http://host1, http://host2"/>
</mvc:cors>
Clone this wiki locally