[STANBOL-105] Support Multi-Site Scripting via Cross-Origin Resource Sharing

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: entityhub-0.11.0
• Component/s: Enhancer, Entityhub, Reasoners, Reengineer, Rules
• Assignee: Unassigned
• Reporter: Rupert Westenthaler
• Created: 26/Feb/11 12:14
• Updated: 17/Jul/13 15:14
• Resolved: 13/Dec/12 11:48

Description

See http://www.w3.org/TR/cors/ for the specification and
https://developer.mozilla.org/En/HTTP_Access_Control describes a nice description with examples.

basically if http://example.com needs to request the stambol server running at http://stanbol.demo.org
than the header will include
GET /resources/public-data/ HTTP/1.1
Host: http://stanbol.demo.org
Accept: application/rdf+json
Origin: http://example.com

and the response needs to include
Access-Control-Allow-Origin: *
telling the browser that it can use the returned data with any other domain.

For requests other than GET and POST (with content types != application/x-www-form-urlencoded, multipart/form-data, or text/plain) one need to use Preflighted requests (something more complex because is requires the use of an additional OPTIONS request).

This would be an replacement for the request to implement JSONP. In addition it is based on an official specification by W3C and it supports all HTTP request types.

Issue Links

• contains: STANBOL-712 CORS access to the Rules endpoint