<div dir="ltr"><div>I use the following code to allow all origins:</div><div><br></div><div><div><font face="monospace, monospace"> $c->response->header('Access-Control-Allow-Origin' => $c->req->header('origin'));</font></div><div><font face="monospace, monospace"> $c->response->header('Access-Control-Allow-Methods' => 'GET,POST,OPTIONS');</font></div><div><font face="monospace, monospace"> $c->response->header('Access-Control-Allow-Headers' => 'accept,content-type');</font></div><div><font face="monospace, monospace"> $c->response->header('Access-Control-Allow-Credentials' => 'true');</font></div><div><font face="monospace, monospace"><br></font></div><div><font face="monospace, monospace"> if ($c->req->method eq 'OPTIONS') {</font></div><div><font face="monospace, monospace"> $c->stash(jsonrpc_output => { result => 'CORS Workaround' });</font></div><div><font face="monospace, monospace"> return;</font></div><div><font face="monospace, monospace"> }</font></div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jun 18, 2018 at 3:34 AM, Theo Bot <span dir="ltr"><<a href="mailto:thg.bot@gmail.com" target="_blank">thg.bot@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>David,</div><div><br></div><div>It is routed to the default en routine:</div><div><br></div><div>sub end :ActionClass('RenderView') {</div><div> my($self,$c) = @_;<br></div><div>}<br></div></div><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On Fri, Jun 15, 2018 at 3:07 PM, David Dorward <span dir="ltr"><<a href="mailto:david@dorward.me.uk" target="_blank">david@dorward.me.uk</a>></span> wrote:<br></span><div><div class="h5"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>cOn 15 Jun 2018, at 13:54, Theo Bot wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Can anybody tell me to to add an "Access-Control-Allow-Origin" in the<br>
header:<br>
<br>
I've tried "$c->response->header('Access-<wbr>Control-Allow-Origin' => '*');<br>
</blockquote>
<br></span>
That's how you do it.<span><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
But I don't see it in the response<br>
</blockquote>
<br></span>
Is that line of code actually running for the response?<br>
<br>
Have you put it on the wrong route by mistake?<br>
<br>
Are you putting it on the response for a POST or GET request when the browser is making a preflight OPTIONS request which isn't being handled by that?<br>
<br>
______________________________<wbr>_________________<br>
List: <a href="mailto:Catalyst@lists.scsys.co.uk" target="_blank">Catalyst@lists.scsys.co.uk</a><br>
Listinfo: <a href="http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst" rel="noreferrer" target="_blank">http://lists.scsys.co.uk/cgi-b<wbr>in/mailman/listinfo/catalyst</a><br>
Searchable archive: <a href="http://www.mail-archive.com/catalyst@lists.scsys.co.uk/" rel="noreferrer" target="_blank">http://www.mail-archive.com/ca<wbr>talyst@lists.scsys.co.uk/</a><br>
Dev site: <a href="http://dev.catalyst.perl.org/" rel="noreferrer" target="_blank">http://dev.catalyst.perl.org/</a><br>
</blockquote></div></div></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><br>-- <br><div class="m_-3673931286536310316gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Met vriendelijke groet,<br><br>Theo Bot<br><br></div></div></div>
</font></span></div>
<br>______________________________<wbr>_________________<br>
List: <a href="mailto:Catalyst@lists.scsys.co.uk">Catalyst@lists.scsys.co.uk</a><br>
Listinfo: <a href="http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst" rel="noreferrer" target="_blank">http://lists.scsys.co.uk/cgi-<wbr>bin/mailman/listinfo/catalyst</a><br>
Searchable archive: <a href="http://www.mail-archive.com/catalyst@lists.scsys.co.uk/" rel="noreferrer" target="_blank">http://www.mail-archive.com/<wbr>catalyst@lists.scsys.co.uk/</a><br>
Dev site: <a href="http://dev.catalyst.perl.org/" rel="noreferrer" target="_blank">http://dev.catalyst.perl.org/</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">João André Simioni<br><a href="mailto:jasimioni@gmail.com" target="_blank">jasimioni@gmail.com</a></div></div>
</div>