Is there a CORS support?

Question

question

faustofausto94 asked May 12, '17

Is there a CORS support?

Hello, I'm trying to make a ws call in angularJS to the following url that from now on I will call **mySearchUrl**: http://open.api.ebay.com/Shopping?callname=GetCategoryInfo&appid=myAppID&CategoryID=-1&IncludeSelector=ChildCategories&version=967&siteid=101 But when I try to make the from another domain it gives me a CORS error: *XMLHttpRequest cannot load* **mySearchUrl**. *No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin ' http://www.mydomain.com' is therefore not allowed access.* So I fixed the problem using the: $http.defaults.headers.common= { 'Access-Control-Allow-Origin': '*', 'Access-Control-Allow-Headers': 'X-Requested-With, Origin, Content-Type, X-Auth-Token', 'Access-Control-Allow-Methods': 'GET, PUT, POST, DELETE' } to modify the requests header and now the problem is: XMLHttpRequest cannot load **mySearchUrl**. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin ' http://mydomain.com' is therefore not allowed access. So I'm testing everything but I can't solve this problem. I also tested the URL from a CORS-test site and it doesn't work, so: Can Anybody tell me if these ws calls are CORS enabled? how can I solve, please? Thank you very much for your help

search-api categories cors domain

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 1 · 2017-05-15T10:00:56Z

clickimusprime answered May 15, '17

There is no call to retrieve all categories. You have to walk the tree. There are other threads that discuss this. You should consider retrieving and caching category data as needed rather than preloading it all. CORS doesn't apply to jsonp, so you don't need headers. eBay's system supports jsonp with the callbackname as I mentioned previously. You're probably handling the response directly instead of using the callback function. Here's a simple example to fetch a category name via jsonp: pending... Again, you shouldn't be doing it this way unless it's a private app. Instead, create a PHP (or whatever) page that does an API request and outputs the data you need to the screen in JSON/HTML/delimited. Then call the PHP page with AJAX to make the API request and get the data. Try to keep as much of the code as possible on the server side.

· 1

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

faustofausto94 · May 16, 2017 at 01:52 AM

You've been precious! Seriously, thank you very much for your tips. Have a nice day

0 ·

Answer 2 · 2017-05-12T06:19:04Z

clickimusprime answered May 12, '17

Use the jsonp callback option, see Making a Call at the top of the docs. Note that you are exposing your appid to clients this way. The preferred way is to setup a script on your server that makes the request and then returns the results, then call that script with ajax. This keeps your appid private.

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 3 · 2017-05-13T08:00:56Z

faustofausto94 answered May 13, '17

@clickimusprime You mean this page? https://developer.ebay.com/Devzone/finding/Concepts/MakingACall.html maybe some code clarifies; this doesn't work: $scope.getSuperCategories = function(){ var getSuperCategories = $http({ url: mySearchUrl, dataType: 'jsonp', headers: {'Access-Control-Allow-Origin': '*', 'Access-Control-Allow-Headers': 'X-Requested-With, Origin, Content-Type, X-Auth-Token', 'Access-Control-Allow-Methods': 'GET, PUT, POST, DELETE'} }).then(function(result){ $scope.superCategories = result.data; }); }; with the following code, instead, CORS errors disappear: $.ajax({ url: url, dataType: "jsonp", beforeSend: function(request) { request.setRequestHeader("Access-Control-Allow-Origin", '*'); }, success: function(root){ main.superCategories = root; } }); but it gives me Uncaught SyntaxError: Unexpected token < on the first line of the correct document containing ebay's data: what's wrong with this? Thank you, I really appreciate this.

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 4 · 2017-05-14T08:06:26Z

clickimusprime answered May 14, '17

Can't tell what's wrong with your URL because you didn't post it. But since the response is XML, you probably didn't follow the instruction about how to request a JSON response.

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 5 · 2017-05-14T21:57:18Z

xiang.developersupport answered May 14, '17

Hi faustofausto94, Please note CORS and JSONP are general concepts in web development, instead of eBay specific feature. Please note it does not make sense to set HTTP request headers, such as Access-Control-Allow-Origin and send it to the server. You should set such headers in the response from your own server side when your own server serves your request. Access-Control-Allow-Origin specifies which sites are allowed. Then after this request, you can send requests to the sites which are included in Access-Control-Allow-Origin. From some point of view, JSONP can be also an option for CORS, but it's another topic. Maybe you would like to do some learning about CORS and JSONP by yourself. Best Regards,

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 6 · 2017-05-15T03:53:27Z

faustofausto94 answered May 15, '17

@xiang.developersupport I know they're general concept, but you clarified me an important thing, thank you. @clickimusprime I dind't post the URL because I was testing a similiar URL. the definitive search I have to do is to get all categories(with child included). But I don't know the correct URL, maybe you can help me. I was testing with the GetCategoryInfo, but it returns only one child level: http://open.api.ebay.com/Shopping?callname=GetCategoryInfo&appid=MY-APP-ID&CategoryID=-1&IncludeSelector=ChildCategories&version=967&siteid=101&responseencoding=JSON now I'm trying to get all categories, but I was wrong because I didn't know about the "reponseencoding=JSON" part. After adding it the CORS error didn't disappear but at least I don't have to parse xml. Now my target is to retrieve all categories using an URL: I read about the GetCategories but I dind't find a real solution using the URL to get ALL the existing categories. Do you know which URL to use, please? Thank you for your assistance.

10 |600 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

question