Merge branch 'fix/credentials-cors' into endpoint_cluster

ant-media · Apr 11, 2022 · 53e305f · 53e305f
2 parents ad08133 + b4e10a7
commit 53e305f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/main/webapp/WEB-INF/web.xml b/src/main/webapp/WEB-INF/web.xml
@@ -71,10 +71,14 @@
 		 	<param-name>cors.allowed.methods</param-name>
 		 	<param-value>GET,POST,HEAD,OPTIONS,PUT,DELETE</param-value>
 		 </init-param>
+
+		 <!-- cors.allowed.origins -> * and credentials are not supported at the same time.  
+		 If you set to cors.allowed.origins to specific domains and support credentials open the below lines
 		 <init-param>
             <param-name>cors.support.credentials</param-name>
             <param-value>true</param-value>
          </init-param>
+         -->
 		 <init-param>
 		 	<param-name>cors.allowed.headers</param-name>
             <param-value>Accept, Origin, X-Requested-With, Access-Control-Request-Headers, Content-Type, Access-Control-Request-Method, Authorization</param-value>