How to enable CORS on Bamboo?

[Trevor Reed]

I would like to take advantage of the Bamboo APIs, but when I make requests from my client application, I get a CORS error (it seems to me that CORS requests should automatically be enabled for the Bamboo API). How can I allow my origin access to the Bamboo APIs?

[Andy Shinn]

This gave me a lot of grief. But I was finally able to figure out the magic Apache settings to solve this in an Apache proxy:

<VirtualHost _default_:443>
        ServerName yourhost
        ServerAdmin someperson@yourorg.com

        SSLEngine on
        SSLCertificateFile /etc/ssl/private/yourorg.com.crt
        SSLCertificateKeyFile /etc/ssl/private/yourorg.com.key
        SSLCertificateChainFile /etc/ssl/private/chain.pem

        SSLProxyEngine          On
        ProxyRequests           Off
        ProxyPreserveHost       On

        RewriteEngine On
        RewriteCond %{REQUEST_METHOD} OPTIONS
        RewriteRule ^(.*)$ - [ENV=PREFLIGHT:true]

        SetEnvIf Origin "^(.*)$" ORIGIN=$0
        Header always set Access-Control-Allow-Origin %{ORIGIN}e env=PREFLIGHT
        Header always set Access-Control-Allow-Credentials "true" env=PREFLIGHT
        Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS" env=PREFLIGHT

        RewriteCond %{REQUEST_METHOD} OPTIONS
        RewriteRule ^(.*)$ $1 [R=204,L]

        ProxyPass / http://host.yourorg.com:8087/
        ProxyPassReverse / http://host.yourorg.com:8087/
</VirtualHost>

This allows Apache to intercept preflight requests (that are sent as an OPTIONS request) and add some headers (only if it is an OPTIONS request) and then return a 204.

The rest of it is just enabling to CORS filter in Tomcat: https://tomcat.apache.org/tomcat-8.0-doc/config/filter.html#CORS_Filter.

[matt_dolan_advantasure_com]

In which file, on Windows if anyone knows, should the above content be placed in?  Excluding the Tomcat CORS filter, are there any additional steps required to enable CORS for Bamboo?

Thanks! 

[Kalle Sirkesalo]

Most of the stuff said in here: https://answers.atlassian.com/questions/69356

Should work in your case also.