Question about CORS

[swagger-api]

Question about CORS

[fehguy]

Hi, take a look here:

https://github.com/wordnik/swagger-core/wiki/CORS

for point 2, you simply need to add the headers when writing the response back to the client. If you're using the swagger-node-express module, it'll add them automatically:

https://github.com/wordnik/swagger-node-express/blob/master/Common/node/swagger.js#L74

[JamieMoon]

Hi, Fehguy

Thank you for such a quick response.

What I had done before were

1. launch swagger-node-express example
   D:\Lab\Node.js\kws\swagger-node-express> node Apps\mystore\main.js

2. Check header

• D:\Lab\Node.js\kws\swagger-node-express>curl -I http://localhost:8001/docs
  HTTP/1.1 302 Moved Temporarily
  X-Powered-By: Express
  Location: /docs/
  Date: Thu, 16 Jan 2014 02:16:57 GMT
  Connection: keep-alive
• D:\Lab\Node.js\kws\swagger-node-express>curl -I http://localhost:8001/api-docs
  HTTP/1.1 200 OK
  X-Powered-By: Express
  Access-Control-Allow-Origin: *
  Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE
  Access-Control-Allow-Headers: Content-Type, api_key
  Content-Type: application/json; charset=utf-8
  Date: Thu, 16 Jan 2014 02:17:04 GMT
  Connection: keep-alive

3. Tested my API list (Not Node.js or Swagger-Integrated) in the input box of swagger API explorer
   these API list is located in remote server and have no CORS header in their response

In '3)', as i explained what i have done before, wiki/CORS and you're telling me that
i have to add the CORS header in their(remote server APIs) response header, right?

Thank you for your patience.

[fehguy]

That is correct. The CORS support has to be on the remote server, not the server providing the swagger-ui.