Access to API Rest blocked by CORS

[amasik]

Hi!

I want to call the API REST Confluence for my confluence server in Sharepoint's React.js code.

But I have this issue:

Access to XMLHttpRequest at 'http://confluence-server' from origin 'http://sharepoint2019' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I already add http://sharepoint2019 in the whiteliste of my confluence server.

Thanks in advance

[Shannon S]

Hello @amasik,

Thank you for reporting this to us. I'm aware of a bug where adding the URL to Allow Incoming in the Confluence whitelist isn't adding the necessary header.

• CONFSERVER-41269 Access-Control-Allow-Origin header missing from Confluence CORS implementation

There's a workaround on that bug where you can add the header yourself:

• Add the header via Tomcat by adding the following to <confluence-install>/confluence/WEB-INF/web.xml:
  
  

      <!-- Tomcat built in CORS implementation -->
      <filter>
        <filter-name>CorsFilter</filter-name>
        <filter-class&gt;org.apache.catalina.filters.CorsFilter</filter-class&gt;
      </filter>
      <filter-mapping>
        <filter-name>CorsFilter</filter-name>
        <url-pattern>/*</url-pattern>
      </filter-mapping>
      <!-- End of built in CORS implementation -->
  

• If using Apache as a reverse proxy, add the following to the <Location> or <VirtualHost> configured for Confluence (reference: CORS on Apache):
  

  Header set Access-Control-Allow-Origin "*"

Can you try that, and let me know how it goes?

Regards,

Shannon