nextcloud / nextcloud/collectives
CORs for external web apps
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 195
- Forks
- 51
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 48
Description
Let me first start by saying this may be me not understanding things / request for documentation, and not a feature request 😅
Is your feature request related to a problem? Please describe.
I am unable to make requests to the OCS API due to OPTIONS preflight method not being allowed.
Describe the solution you'd like
The API to allow requests from external sites.
Describe alternatives you've considered
There isn't one. WebDav (using webpasswordapp) only allows access to files, but Collectives links to pages using its own structure/IDs.
Additional context
The API works for requests that do not require a browser.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the OCS API handling and how it responds to browser OPTIONS preflight requests. Compare the behavior of browser requests with requests that do not require a browser, then define the external-origin behavior and verify that the API can be called from an external web app.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- api, backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100