Back to Questions
483
views2
comments
Is a crossdomain remoting request possible?
websharperremotingrpccross-domain

Hi, everyone.

We need to integrate a WebSharper-generated page into a bigger, non-WebSharper-based website. While we managed to insert the right code to generate the page, we faced problems with remote calls to the server.

First, it turned out that WebSharper sends all AJAX requests to the current URL. This problem was solved by modifying Remoting.Ajax in WebSharper.Main.js. Also, we made changes to the configuration of the IIS server:

1
2
3
4
5
6
7
8

<customHeaders>
        <clear />
        <add name="X-Powered-By" value="ASP.NET" />
        <add name="Access-Control-Allow-Origin" value="http://some-url:some-port"/>
        <add name="Access-Control-Allow-Headers" value="Accept, X-Access-Token, X-Application-Name, X-Request-Sent-Time, content-type, x-websharper-rpc, x-csrftoken"/>
        <add name="Access-Control-Allow-Methods" value="GET, POST, OPTIONS"/>
        <add name="Access-Control-Allow-Credentials" value="true"/>
</customHeaders>

Nevertheless, we ended up with Error 403 Forbidden. We suspect that it's related to these lines in Remoting.Ajax:

1
2
3

  csrf $ 1 = Global.document.cookie.replace (new Global.RegExp ("(?: (?: ^ |. *;) \\ s * csrftoken \\ s * \\ = \\ s * ([^;] *). * $) | ^. * $ ")," $ 1 ");
  if (csrf $ 1)
    xhr.setRequestHeader ("x-csrftoken", csrf $ 1);

Could it be that there is an additional check in the web server, which returns 403?

Thank you.

.

First, to change the URL to which you send RPCs, a cleaner way is to call WebSharper.Remoting.EndPoint <- "http://your-server-url" in your client-side WebSharper code (or if you want to do it in JavaScript: WebSharper.Remoting.set_EndPoint("http://your-server-url").

As for the 403 error: yes, there is an additional check in the web server. You need to add your client's URL to the allowed clients by calling WebSharper.Web.Remoting.AddAllowedOrigin "http://your-client-url" on the server. And with this you shouldn't need to add any customHeaders in Web.config.

By on 10/19/2017 6:08 AM ()

Thanks! A related question: the method that you have described allows us to do POST requests. Is there a similar way to perform GET requests?

By on 10/23/2017 1:40 AM ()

    Topic tags

    IntelliFactory Offices Copyright (c) 2011-2012 IntelliFactory. All rights reserved.
    Home | Products | Consulting | Trainings | Blogs | Jobs | Contact Us | Terms of Use | Privacy Policy | Cookie Policy     		Built with WebSharper