3

I have been struggling with this for quite sometime now. I believed I had the issue resolved, but lo and behold, it arised again.

Here is my problem from localhost:

OPTIONS http://my.server.com/authorize Origin http://localhost is not allowed by Access-Control-Allow-Origin. jquery-1.8.2.min.js:2
XMLHttpRequest cannot load http://my.server.com/authorize. Origin http://localhost is not allowed by Access-Control-Allow-Origin.

I am trying to make a request from a client to my Sinatra application. My client code is as follows:

function authorize(token)
{
  $.ajax({
    url: "http://my.server.com/authorize/authorize",
    crossDomain: "true",
    jsonp: "false",
    async: true,
    headers: {"Authorization" : token},
    success: function(data){
      console.log("success");
      window.location = (envHost+"/fb/authenticate");
    }
  });
}

In my Sinatra application I made an effort to enable CORS. I have tried both of the following ways:

options '/*' do
  headers['Access-Control-Allow-Origin'] = "*"
  headers['Access-Control-Allow-Methods'] = "GET, POST, PUT, DELETE, OPTIONS"
  headers['Access-Control-Allow-Headers'] ="accept, authorization, origin"
end

and

before do  
  headers['Access-Control-Allow-Methods'] = 'GET, POST, PUT, DELETE, OPTIONS'
  headers['Access-Control-Allow-Origin'] = '*'
  headers['Access-Control-Allow-Headers'] = 'accept, authorization, origin'
end

Even in my Apache Passenger VirtualHost I made the following addition

  <Directory    /var/Developer/MySite/public>
   Options     -MultiViews
   AllowOverride All
   Allow       from all
   Header set Access-Control-Allow-Origin "*"
   Header set Access-Control-Allow-Methods: "GET, POST, PUT, DELETE, OPTIONS"
   Header set Access-Control-Allow-Headers: "accept, authorization, origin"
  </Directory>

This has been a pain in the neck. If anyone has guidance, it would be much appreciated on why CORS will not work.

4

1 回答 1

2

我找到了我的问题的答案。最初，我通过我的 sites-available/defaults 文件和Sinatra Web 服务路由将标头信息添加到乘客 Web 服务器。在两个地方都设置了 CORS 响应标头导致我的响应标头具有关于允许的来源、方法等的重复标头信息。

一旦我从 Web 服务器中删除了标头，并将它们留在 Web 服务路由上，我的请求就通过了。

于 2013-06-10T21:24:44.903 回答