Mirror of forum.nim-lang.org

4903 :: CORS in Jester

• revilotom (orginal) [2019-06-04T15:44:07+02:00] view original

  I would really appreciate it if someone could provide me an example of how to enable CORS with Jester. Thanks.

---

• dom96 (orginal) [2019-06-04T21:47:59+02:00] view original

  I think you need to set appropriate headers, doing so in Jester is trivial (didn't test this but should work):

  
  routes:
    get "/":
      resp Http200, {"Access-Control-Allow-Origin": "http://www.example.com"}, "Content"
  Run

  (Source: https://en.wikipedia.org/wiki/Cross-origin_resource_sharing)

---

• lxdong (orginal) [2019-06-06T04:54:45+02:00] view original

  routes:
      get re"/(.*)":
          cond request.matches[0].splitFile.ext == ""
          resp(Http200, {"Access-Control-Allow-Origin":"*"}, readFile("index.html"))
      post "/login":
          var body = parseJson request.body()
          var name = body["name"].getStr
          var password = body["password"].getStr
          var target = db.getValue(sql SELECT "password".FROM "user".WHERE"name=?", name)
          if password != "" and password  == target:
              resp(Http200, {"Access-Control-Allow-Origin":"*"},"success")
  Run

  seems doesn't solve this problem, do we literally need {"Access-Control-Allow-Origin":"*"} for every response?

---

• revilotom (orginal) [2019-06-10T16:51:24+02:00] view original

  Yeah I got it to work by putting {"Access-Control-Allow-Origin":"*"} for every response but wanted to know if there was around this, so we only need to specify this once.

---

• leorize (orginal) [2019-06-10T18:59:27+02:00] view original

  template corsResp(code, message: untyped): untyped =
    mixin resp
    resp code, {"Access-Control-Allow-Origin": "*"}, message
  Run

  Some templating magic for this, haven't tested though.

---

• lxdong (orginal) [2019-07-09T17:19:18+02:00] view original

  Why doesn't my code work? It's the same with

  resp(Http200, {"Access-Control-Allow-Origin":"*"} ,"ok")
  Run

---

• mashingan (orginal) [2019-07-10T02:24:32+02:00] view original

  Maybe your client-side hit with pre-flight request.

---