Does apisix cors plugin working normal #11218

troyqu · 2024-04-30T09:49:23Z

troyqu
Apr 30, 2024

here is a simple code of apisix cors plugin. after i read the apisix doc of cors usage. i add a router like this。

curl http://192.168.101.23:30218/apisix/admin/routes/1 -H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PUT -d '
{
    "uri": "/ams/usercenter",
    "plugins": {
        "cors": {
            "enable": true,
            "allow_origins": "https://dev.local.com",
            "allow_methods": "GET,POST",
            "allow_headers": "*",
            "max_age": 3600,
            "allow_credential": false
        },
    },
    "upstream": {
        "type": "roundrobin",
        "nodes": {
            "192.168.101.25:31102": 1
        }
    }
}'

then i access ams/usercenter router as apisix gateway ip+port as below

➜  ~ curl http://192.168.101.25:30290/ams/usercenter -H 'Origin: http://troy123.com' -v
*   Trying 192.168.101.25:30290...
* Connected to 192.168.101.25 (192.168.101.25) port 30290 (#0)
> GET /ams/usercenter HTTP/1.1
> Host: 192.168.101.25:30290
> User-Agent: curl/7.88.1
> Accept: */*
> Origin: http://troy123.com
>
< HTTP/1.1 401
< Content-Type: application/json
< Transfer-Encoding: chunked
< Connection: keep-alive
< Set-Cookie: client-uuid=e9149979-17c7-42f8-b8a8-abac74665610; Max-Age=315360000; Expires=Fri, 28-Apr-2034 09:46:42 GMT; Path=/; HttpOnly
< Date: Tue, 30 Apr 2024 09:46:42 GMT
< Server: APISIX/3.8.0
< Vary: Origin
<
* Connection #0 to host 192.168.101.25 left intact
{"timestamp":"2024-04-30T17:46:42.849+08:00","status":401,"path":"/ams/usercenter","method":"GET","ms":3,"error":"login.required","message":"用户未登录或会话已过期"}%

i expected the request i send should fail as the cors allow_origins param. but cors plugin config seems does not work as i expected. anyone has any idea about this.

i used apisix with 3.8.0 version.

troyqu · 2024-05-07T07:23:40Z

troyqu
May 7, 2024
Author

this is problem as i use curl cmd to trigger a http call. as we validate cors request. the best way that use another http server. anyone hit this issue can try like below steps.

call apisix core route in html js

vi cors.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Fetch JSON Example</title>
</head>
<body>

<div id="output"></div>

<script>
    // 使用Fetch API获取数据
    fetch('http://192.168.101.23:30290/ams/usercenter',{
        headers: {  
        "origin": "http://127.0.0.1:8080"
      },
    })
        .then(response => {
            // 检查响应是否成功
            if (!response.ok) {
                throw new Error('Network response was not ok');
            }
            // 解析JSON格式的响应体
            return response.json();
        })
        .then(data => {
            // 在控制台打印数据，便于调试
            console.log(data);

            // 将数据插入到HTML中的指定元素
            document.getElementById('output').innerHTML = JSON.stringify(data, null, 2); // 使用JSON.stringify美化输出
        })
        .catch(error => {
            // 如果发生错误，则在控制台打印错误信息
            console.error('There has been a problem with your fetch operation:', error);
            // 可以选择在这里向用户显示错误信息
            document.getElementById('output').innerText = 'Error fetching data.';
        });
</script>

</body>
</html>

2.start a http server, here i started server with python. nginx also can do it

mkdir cors
mv cors.html cors/
cd cors

python3 -m http.server
➜  cors python3 -m http.server
Serving HTTP on :: port 8000 (http://[::]:8000/) ...

access http server in brower
cors error screen snapshot

success screen snapshot

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Does apisix cors plugin working normal #11218

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Does apisix cors plugin working normal #11218

Uh oh!

troyqu Apr 30, 2024

Replies: 1 comment

Uh oh!

troyqu May 7, 2024 Author

troyqu
Apr 30, 2024

troyqu
May 7, 2024
Author