~~NOTRANS~~
~~Title: Using REST Services With CORS~~

Details about [[https://en.wikipedia.org/wiki/Cross-origin_resource_sharing|CORS]].

JVx' REST services support CORS since [[http://restlet.com/|RESTlet]] update to 2.3.2. This version has the class CorsFilter which handles CORS automatically.

CORS support is disabled by default. If you want to call your REST service from "another domain", simply enable CORS via web.xml:

<file xml web.xml>
  <!--
  ************************************************************************** 
   REST support 
  **************************************************************************
  -->

  <!-- Restlet adapter -->  
  <servlet>  
    <servlet-name>RestletServlet</servlet-name>  
    <servlet-class>org.restlet.ext.servlet.ServerServlet</servlet-class>
    
    <init-param>
      <!-- Application class name -->
      <param-name>org.restlet.application</param-name>
      <param-value>com.sibvisions.rad.server.http.rest.RESTAdapter</param-value>
    </init-param>
    
    <init-param>
      <param-name>cors.origin</param-name>
      <param-value>*</param-value>
    </init-param>
    
  </servlet>  
  
  <servlet-mapping>  
    <servlet-name>RestletServlet</servlet-name>  
    <url-pattern>/services/rest/*</url-pattern>  
  </servlet-mapping>
</file>  

The init parameter cors.origin takes a comma separated list or simply * (for all sites).