REST interface (POST) and CORS

[Anonymous]

Hello,
I have implement different REST interfaces. One interface for receiving data from a database. For that I use following schema:

Under tRestResponse I set Access-Control-Allow-Origin = *. That works fine. 
One interface I use for post data into in db. I use following schema:


Also under tRESTResponse I set Access-Control-Allow-Origin = *. But that not works. Under angularJS I also activate $http.defaults.headers.common = '*'; But in chrome/firefox I receive that error: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:9000' is therefore not allowed access.

Greets Benjamin

[Anonymous]

If a 1st service uses GET then it means it is a 'simple' CORS request.
If you have POST/PUT/DELETE then a browser will do a so-called preflight request first. You can add an OPTIONS flow handler to manage it. FYI a TESB JIRA exists to make this process smoother for the job designers 

[Anonymous]

So I add OPTIONS flow for the same URI to an trestresponse and add "Access-Control-Allow-Methods" right?

[Anonymous]

Yes please, add OPTIONS flow handler to tRESTRequest's URL Handler which will listen on the same URL where POST data will be sent to from a browser - the browser should issue a pre-flight OPTIONS request first - you may need to add few more headers to make it this pre-flight pass, see
https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS
which is one of the best articles.
HTH, Sergey

[Anonymous · Accepted solution]

Hello, I had the same CORS issue when calling a Talend ESB REST Web Service, I solved it this way.

• we have an Angular 6 app running at "http://localhost:4200"
• a REST API (POST) made with Talend ESB serving at "http://192.168.202.190:8090/sayHello/{name}" where {name} is a dynamic POST param.

The Angular App running at http://localhost:4200 sends POST request that it preceded by a preflight OPTIONS request.

We have to configure in the tRESTRequest both HTTP verbs output flows namely POST and OPTIONS with the same URL (http://192.168.202.190:8090/sayHello/{name}).  

• Headers to add in the "Component/Advanced Settings" tab of tRESTResponse for tRESTRequest OPTIONS Output Flow :

"Access-Control-Allow-Origin" : "*"

"Access-Control-Allow-Methods" : "OPTIONS"

"Access-Control-Allow-Headers" : "Access-Control-Allow-Origin, Accept, Content-Type"

• Headers to add in the "Component/Advanced Settings" tab of tRESTResponse for tRESTRequest POST Output Flow :

"Access-Control-Allow-Origin" : "*"

"Access-Control-Allow-Methods" : "POST"

"Access-Control-Allow-Headers" : "Content-Type"

• Headers to add in the options of the Angular 6 POST Method :

'Content-Type': 'application/json'

'Accept': 'application/json'

'Access-Control-Allow-Origin': '*'

That 's All you have to do to make it work fine !! !

It 's possible you get a CORB warning .