<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic QlikSense qlikTicket CORS Issue in Integration, Extension &amp; APIs</title>
    <link>https://community.qlik.com/t5/Integration-Extension-APIs/QlikSense-qlikTicket-CORS-Issue/m-p/1265426#M6934</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I am currently trying to create an external QlikSense mashup. The issue I am currently running into is a CORS issue when trying to send the qlikTicket over to the Qlik server.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Ideal Setup/Flow is currently like this:&lt;/P&gt;&lt;P&gt;1. User inputs login credentials into angular frontend. These credentials are passed to backend via RestAPI.&lt;/P&gt;&lt;P&gt;2. Java backend then verifies login credentials before asking qlik server for a ticket number. This ticket is passed to the frontend.&lt;/P&gt;&lt;P&gt;3. Frontend then makes a $http.get() request to a darknoise url with the ticket as a query parameter to get the cookie to authenticate the session.&lt;/P&gt;&lt;P&gt;4. Redirect browser to application that is using require.js (since you have to be authenticated to access this resource). &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Both backend and frontend are external to Qlik.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;At step 3, I am running into the CORS issue. I've tried adding various configurations to Additional Response Headers in the virtual proxy section involving Access-Control-Allow-Origin including * and my host. Neither worked.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Does anyone have any ideas as to why this isn't working or suggestions for how I can authenticate my session from an external mashup without directing the user away from the webpage and to the qlik server?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My current workaround is loading a hidden iframe with the qlik url including the ticket. This works, however, in order to dynamically create the iframe url, I have to $sce.trustAsResourceUrl the image, which causes a MIME type issue that stops the application from progressing until clicking again.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 24 Feb 2017 21:10:05 GMT</pubDate>
    <dc:creator />
    <dc:date>2017-02-24T21:10:05Z</dc:date>
    <item>
      <title>QlikSense qlikTicket CORS Issue</title>
      <link>https://community.qlik.com/t5/Integration-Extension-APIs/QlikSense-qlikTicket-CORS-Issue/m-p/1265426#M6934</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I am currently trying to create an external QlikSense mashup. The issue I am currently running into is a CORS issue when trying to send the qlikTicket over to the Qlik server.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Ideal Setup/Flow is currently like this:&lt;/P&gt;&lt;P&gt;1. User inputs login credentials into angular frontend. These credentials are passed to backend via RestAPI.&lt;/P&gt;&lt;P&gt;2. Java backend then verifies login credentials before asking qlik server for a ticket number. This ticket is passed to the frontend.&lt;/P&gt;&lt;P&gt;3. Frontend then makes a $http.get() request to a darknoise url with the ticket as a query parameter to get the cookie to authenticate the session.&lt;/P&gt;&lt;P&gt;4. Redirect browser to application that is using require.js (since you have to be authenticated to access this resource). &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Both backend and frontend are external to Qlik.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;At step 3, I am running into the CORS issue. I've tried adding various configurations to Additional Response Headers in the virtual proxy section involving Access-Control-Allow-Origin including * and my host. Neither worked.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Does anyone have any ideas as to why this isn't working or suggestions for how I can authenticate my session from an external mashup without directing the user away from the webpage and to the qlik server?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;My current workaround is loading a hidden iframe with the qlik url including the ticket. This works, however, in order to dynamically create the iframe url, I have to $sce.trustAsResourceUrl the image, which causes a MIME type issue that stops the application from progressing until clicking again.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thank you,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 24 Feb 2017 21:10:05 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Integration-Extension-APIs/QlikSense-qlikTicket-CORS-Issue/m-p/1265426#M6934</guid>
      <dc:creator />
      <dc:date>2017-02-24T21:10:05Z</dc:date>
    </item>
  </channel>
</rss>

