(v24) Using Cross-Origin Resource Sharing

Using Cross-Origin Resource Sharing

This applies to: Managed Dashboards, Managed Reports

This section explains how to enable and use Cross-Origin Resource Sharing (CORS) in Symphony. This allows your web application's JavaScript to communicate with Symphony's APIs or whenSymphony is embedded even if your application and Symphony are hosted on different domains.

Important: Browser support for embedding HTTP cross-domain content is changing, and Symphony should now either run on HTTPS or have the same URL origin (protocol, hostname/domain, and port number) as the parent application.

Cross-origin resource sharing must be configured in Symphony to enable either of these two types of communication with Symphony from your own client-side application's JavaScript:

• Communication with the Symphony server via its API, if the URLs for your application and Symphony have different domains or origins.

• Communication with the Symphony client application embedded on your page in an iFrame or using the embed library, even if both applications have the same domain/origin.

For more information on using CORS, see the following topics:

• Configure Cross-Origin Resource Sharing (CORS)

• Pass Your Application's JavaScript to the Client Application Example

• Other CORS JavaScript Examples

• REST API with CORS Example

• Troubleshooting CORS Issues