Cross domain request with header authentication

Question

I need to send a Get request with cross domain origin with header authentication.

Its working fine in Chrome and Firefox, but I'm having issues in Safari and IE. Also in random cases it returns 401.

<script>
var url = 'username:[email protected]';
$.ajax({
    url: url,
    dataType: 'jsonp',
    jsonpCallback: "callback",
    success: function(json) {
        alert(json);
    }
});
</script>

What would be the best option to solve this?

You get that "random" 401 with Firefox or Chrome or do you get it with Safari and IE? Is there a pattern to it? Like it is the url would be missing the appropriate protocol. You could use console.log rather than alert to get the contents of the JSON variable. — Seth
– Seth, Commented Dec 23, 2016 at 7:59
For Safari and IE, it is not even get executed and nothing show up in console. now i found that IE do not support user name and password in URL support.microsoft.com/en-in/kb/834489 , so i am looking for any other way do have ajax call which support cross origin with header authentication — magento2new
– magento2new, Commented Dec 23, 2016 at 9:05

Kevin Farrugia · Accepted Answer · 2017-01-01 14:46:42Z

2

+50

If I have understood the question correctly, you could use the beforeSend callback to add basic authentication on the request. This is irrelevant of jsonp or cross-origin though.

beforeSend: function (xhr) {
  xhr.setRequestHeader ("Authorization", "Basic " + btoa(username + ":" + password));
}

https://jsfiddle.net/rn9Lp304/

answered Jan 1, 2017 at 14:46

Kevin Farrugia

7,6395 gold badges44 silver badges67 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

magento2new Over a year ago

Kevin, Not sure if I have miss something when I tried with like this before. Its working fine . Thanks

Community · Accepted Answer · 2017-05-23 12:09:52Z

1

For Internet Explorer 8 and 9 you need to use XDomainRequest Object

Internet Explorer 10+ does the cross domain requests normally like all the other browsers.

As mentioned in the documentation you need to

create an object of the XDR using var xdr = new XDomainRequest();
open the connection using the get method using xdr.open("get", "username:[email protected]");
send the data back to the server using xdr.send();

The complete code reference can be shown as on this thread by @Mark Pieszak

as a workaround to set the username and the password in the internet explorer you can set the following

DWORD for iexplore.exe to 0 in: [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE].

edited May 23, 2017 at 12:09

CommunityBot

11 silver badge

answered Dec 26, 2016 at 11:11

Pritish Vaidya

22.3k4 gold badges62 silver badges78 bronze badges

Comments

Socratees Samipillai · Accepted Answer · 2017-01-01 20:00:33Z

0

I will recommend you to try two things:

In ajaxSetup, do this:

$.ajaxSetup({
    ....,
    xhrFields: {
       withCredentials: true
    },
    crossDomain: true,
    ....
});

In your ajax requests, set the full url like so, in addition to the credentials flag.

'Access-Control-Allow-Origin: https://not-example.com'
'Access-Control-Allow-Credentials: true'

For servers with authentication, these browsers do not allow "*" in this header. The Access-Control-Allow-Origin header must contain the value of the Origin header passed by the client.

answered Jan 1, 2017 at 20:00

Socratees Samipillai

3,1451 gold badge23 silver badges20 bronze badges

Comments

A7S · Accepted Answer · 2017-01-01 19:03:17Z

-3

use getJSON

$.getJSON("url",function (data) {/*code here*/});

answered Jan 1, 2017 at 19:03

A7S

1411 silver badge8 bronze badges

1 Comment

Greenstick Over a year ago

$.getJSON() is a shorthand for the $.ajax() jQuery method, were it to solve the issue an explanation would still be required as to why it solves it

Collectives™ on Stack Overflow

Cross domain request with header authentication

4 Answers 4

1 Comment

Comments

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

1 Comment

Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related