Cross Domain HTTP request from browser

[techrhythm]

I would like to add a page on our intranet which contains some information pulled from JIRA. I would like a way to do this client side. Is this possible?

Normally, this would be done using JSONP, but It looks like JSONP has been disabled due to security concerns (which does make some sense).

[Sam Hall]

If jsonp isn't working you're out of luck without doing something server side.

You could provision a web service on your app server that requests the content you need from Jira server side using the Jira api and then serves it to the client as straight JSON or XML from the same domain. In this way you can then restrict what data you expose to your application, just providing a subset of whatever the app server can access (I assume you'll use a service account or something to permit the app to use the Jira API).

If you want to fully emulate cross domain access to the api, you could just an apache ProxyPass directive a subdirectory of your webapp such that all requests to yourapp/rest/ are proxied through to jira/rest/ or something.

[techrhythm]

Thanks for the reply Sam. I was thinking this might be able to be done with CORS, but it looks as if maybe it isn't supported yet in OnDemand:

https://answers.atlassian.com/questions/167909/is-the-jira-rest-api-still-serving-jsonp