Details
-
Type: Bug
-
Status: Closed
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 4.0.BETA
-
Component/s: Push Server
-
Labels:None
-
Environment:ICEpush NaaS
Description
If an attempt is made to use the ICEpush service from multiple domains, the second one will be denied.
To reproduce:
Load the demo http://bridgeit.mobi/demo/geotrack.html
Then load the demo http://bridgeit.github.io/demo-jqm/geotrack.html
The push connection for the second demo will fail as can be seen in the JavaScript console, but the first can be verified to be still functional.
XMLHttpRequest cannot load http://api.bridgeit.mobi/push/code.icepush. Origin http://bridgeit.github.io is not allowed by Access-Control-Allow-Origin.
The cause appears to be that the Access-Control-Allow-Origin header from the initial request to code.icepush is cached, allowing only the initial origin.
The fix is likely to use "*" as the Access-Control-Allow-Origin value. This must be tested.