You can configure CORS settings for the Login API Endpoints that come with the system by default and for the API endpoints you have created. You can use the CORS settings to control which websites or portals can access the API endpoints (in the browser).
CORS Settings for API Login Endpoints
The CORS settings for the login API endpoint are configured in the portal properties.
Step-by-Step
To configure the CORS settings for API login endpoints, follow these steps:
-
Open the portal properties ("Portal" > "Properties")
-
Select the "Security" entry.
-
Go to the "CORS Settings for Login Endpoints" tab
-
Click the "
" icon.A dialog box for entering the Origin domain appears.
-
Enter the Origin domain.
For the origin domain to be valid, the protocol, host, and port (optional) must be specified.
-
Click "OK."
The origin domain is displayed.
CORS Settings for Application API Endpoints
Step-by-Step
To configure the CORS settings for application API endpoints, follow these steps:
-
Launch the application.
-
Click the "API Endpoints" section.
Make sure that the API endpoints view is enabled.
("View" > "API Endpoints")
-
Select the endpoint for which you want to configure the CORS settings.
You can also select multiple endpoints and configure the CORS settings for all selected endpoints at the same time.
-
Click the "
" icon.
The "API Settings" dialog box appears.
Allow all origins (*)
The "Allow All Origins (*)" option sets a wildcard as the origin, thereby allowing access to the endpoints from any possible source.
Use the Whitelist
The whitelist can be used to allow access to the endpoints from specific sources. By default, an empty whitelist is selected. This allows API endpoints to be called only from the same domain.
-
Click the "
" icon to create a whitelist entry. -
Click "OK."