Skip to main content

Create CORS Headers

Creates CORS Headers for website acceleration. This operation is a full replacement: all existing CORS headers configured for the service will be removed and replaced by the provided values.

Request

Request-Line

POST /waap/v1.0/services/{serviceId}/corsHeaders HTTP/1.1

Request Parameters

Path Parameters

ParameterTypeRequiredDescription
serviceIdIntegerMandatoryService ID.

Body Parameters

ParameterTypeRequiredDescription
accessControlAllowOriginStringOptionalResponse can be shared with requesting code from the given origin. Please note that null value is not allowed, it must be either '*' or 'scheme://fqdn'.
accessControlExposeHeadersStringOptionalHeaders can be exposed as part of the response by listing their names. This header accepts any string value. E.g. "Content-Length".
accessControlMaxAgeIntegerOptionalMaximum time in seconds that a CORS preflight response can be cached. Accepts non-negative integers or -1 (0 = no cache, -1 = cache indefinitely).
accessControlAllowCredentialsBooleanOptionalIndicates whether the response can be exposed to frontend JavaScript. Must be true.
accessControlAllowMethodsStringOptionalAccepts a single method or a comma-separated list from: GET, POST, PUT, DELETE, HEAD, OPTIONS, CONNECT, TRACE.
accessControlAllowHeadersStringOptionalHTTP headers can be used during the actual request. This header accepts any string value. E.g. "X-Customer-Token".

Response

Status Codes, Error Codes and Error Messages

Status CodeError CodeError Message
400Request.BadRequestBad request.
400ServiceId.InvalidServiceId is empty or invalid.
400AccessControlAllowOrigin.InvalidAccessControlAllowOrigin is empty or invalid.
400AccessControlMaxAge.InvalidAccessControlMaxAge is empty or invalid.
400AccessControlAllowMethods.InvalidAccessControlAllowMethods is empty or invalid.
400AccessControlAllowCredentials.InvalidAccessControlAllowCredentials is empty or invalid.
400CorsHeaders.OperationFailedThe Cors Headers operation failed.
404ServiceId.NotFoundServiceId is not found.

Examples

Create CORS Headers

Request

POST /waap/v1.0/services/12345/corsHeaders HTTP/1.1

{
"accessControlAllowOrigin": "https://www.example.com",
"accessControlExposeHeaders": "Content-Length, X-Request-Id",
"accessControlMaxAge": 3600,
"accessControlAllowCredentials": true,
"accessControlAllowMethods": "GET,POST,OPTIONS",
"accessControlAllowHeaders": "Content-Type, Authorization"
}