[InterMine Dev] CORS on flymine

Colin colin.diesh at gmail.com
Wed Aug 19 16:13:16 BST 2015

I'm was actually trying this too and get pretty much the same thing on our

I think normally there should just be "Access-Control-Allow-Origin: *" but
it looks like in the intermine code there is this:

          response.setHeader("Access-Control-Allow-Origin", origin);
I am just speculating but should it not just return '*'? It seems like
however it is setup is causing "jsbin" to be set as the origin in the
"jsfiddle" tab or vice versa.


On Wed, Aug 19, 2015 at 6:14 AM, Yo Yehudi <yo at intermine.org> wrote:

> This is mostly for Julie when she gets back I think.
> CORS doesn't appear to be enabled properly on flymine. For a summary of
> the details and how to reproduce, look at this SO thread:
> http://stackoverflow.com/questions/32093513/possible-cors-issue-whats-going-on-and-how-can-i-fix-it.
> Whilst the issue is a pain for devs, we know how to fix it (clear browser
> cache). Potentially, though, a user could encounter it, and the failure
> would be a much bigger problem as they'd be unlikely to look for errors in
> a dev console and know to delete their cache! :)
> The answerer on the SO thread thinks (as do I) it's probably the flymine
> server being grumpy and not permitting CORS.
> Assuming tomcat is serving the API requests, it doesn't look to hard to
> modify the config to enable CORS:
> http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter.
> If it's a different server it's (probably? hopefully?) similarly simple to
> enable, but in either case I'm not sure where to start or I'd try myself :)
> _______________________________________________
> dev mailing list
> dev at intermine.org
> http://mail.intermine.org/cgi-bin/mailman/listinfo/dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.intermine.org/pipermail/dev/attachments/20150819/f88962fa/attachment.html>

More information about the dev mailing list