openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #10514
Re: Using Nova APIs from Javascript: possible?
Javascript *can* set custom headers, but only by using XMLHttpRequest. That
cannot work cross-domain unless the appropriate CORS headers are set.
Hence this issue :)
On Apr 25, 2012 12:21 AM, "Adam Young" <ayoung@xxxxxxxxxx> wrote:
> On 04/24/2012 10:19 AM, Nick Lothian wrote:
>
> JSONP is great, but won't work with POST requests.
>
> I don't quite understand what "Due to the redirect nature of the auth
> system" means, though.
>
>
> Sorry, I am working on a few things that are related. OpenID and various
> other systems have issues along these lines that are due to the fact that
> they are done with redirects. UI'll try to be clearer in the future.
>
>
> That actually works fine because the token is not in the header when it
> comes from Keystone. However, if you were to post toa web app that then
> needed to make your browser post to a remote system (which is where the
> same origin policy comes in to play) you need to set that Auth token into
> a custom header, and Javascript is forbidden to do that. Yes, the
> Javascript can say "post to glance" or some other openstack API server,
> but it can't set the X auth header with the token from Keystone in order to
> make the call authenticated.
>
>
>
>
> Nick
>
> On Tue, Apr 24, 2012 at 8:57 PM, Sandy Walsh <sandy.walsh@xxxxxxxxxxxxx>wrote:
>
>> Due to the redirect nature of the auth system we may need JSONP support
>> for this to work.
>>
>>
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
>
References
-
Using Nova APIs from Javascript: possible?
From: Nick Lothian, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Adrian Smith, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Nick Lothian, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Adrian Smith, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Adam Young, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Tres Henry, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Adam Young, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Tres Henry, 2012-04-23
-
Re: Using Nova APIs from Javascript: possible?
From: Sandy Walsh, 2012-04-24
-
Re: Using Nova APIs from Javascript: possible?
From: Nick Lothian, 2012-04-24
-
Re: Using Nova APIs from Javascript: possible?
From: Adam Young, 2012-04-24