CORS enabled in Apache, but AJAX not working (chrome says origin not allowed)
ajax, apache, cors, jquery, ruby-on-rails
Solution
As Dahazer's link points out, the best bet is set a single Access-Control-Allow-Origin header. It's definitely not appropriate for production, but you could just echo back the `Origin` header whilst your in dev mode.
If you still have a problem, it's likely you're not setting quite enough CORS headers in the response. In my experience of doing cross domain ajax in chrome, (not using jquery mind), I've also needed to set the following header:
Access-Control-Allow-Headers : X-Requested-With,Content-Type
Given I was using HTTP methods other than POST and GET it was also necessary for me to set
Access-Control-Allow-Methods : GET,PUT,POST,DELETE
However, above all I'd recommend reading the html5 CORS tutorial, particularly the CORS on the server section. It should give you a good idea of the different ways to configure CORS, be it on the server or the client ( in your case jquery's ajax config options), based on your specific use case.
Problem
I am trying to get some AJAX working between two subdomains. rails.mydomain.com and mydomain.com In apache, in /etc/apache2/sites-available/ I have my rails.mydomain.com file: ``` <VirtualHost *:80> Header add Access-Control-Allow-Origin "http://www.mydomain.com" Header add Access-Control-Allow-Origin "http://www.dev-mydomain.com" </VirtualHost> ``` However, whenever i try to do a simple ajax test request from http://www.dev-mydomain.com, in Chrome I get: "XMLHttpRequest cannot load http://rails.mydomain.com/directory. Origin http://www.dev-mydomain.com is not allowed by Access-Control-Allow-Origin." Anyone know what I am missing?