Details
-
Type: Bug
-
Status: Closed
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 4.0.BETA
-
Component/s: Push Server
-
Labels:None
-
Environment:ICEpush NaaS
Description
If an attempt is made to use the ICEpush service from multiple domains, the second one will be denied.
Activity
Ted Goddard
created issue -
Ted Goddard
made changes -
Field | Original Value | New Value |
---|---|---|
Assignee | Jack Van Ooststroom [ jack.van.ooststroom ] |
Ted Goddard
made changes -
Fix Version/s | 4.0 [ 10971 ] |
Jack Van Ooststroom
made changes -
Status | Open [ 1 ] | Resolved [ 5 ] |
Resolution | Fixed [ 1 ] |
Ken Fyten
made changes -
Fix Version/s | 4.0 [ 11383 ] |
Ken Fyten
made changes -
Status | Resolved [ 5 ] | Closed [ 6 ] |
To reproduce:
Load the demo http://bridgeit.mobi/demo/geotrack.html
Then load the demo http://bridgeit.github.io/demo-jqm/geotrack.html
The push connection for the second demo will fail as can be seen in the JavaScript console, but the first can be verified to be still functional.
XMLHttpRequest cannot load http://api.bridgeit.mobi/push/code.icepush. Origin http://bridgeit.github.io is not allowed by Access-Control-Allow-Origin.
The cause appears to be that the Access-Control-Allow-Origin header from the initial request to code.icepush is cached, allowing only the initial origin.
The fix is likely to use "*" as the Access-Control-Allow-Origin value. This must be tested.