.htaccess CORS headers not working Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Come Celebrate our 10 Year Anniversary!How to solve “ExpiresActive not allowed here” error message in .htaccess file?How do I add Access-Control-Allow-Origin in NGINX?Access-Control-Allow-Origin “*” not allowed when credentials flag is true.htaccess Not Working Despite AllowOverride AllSetting Access-Control-Allow-Origin in .htaccess for Https protocolCORS headers not added in ApacheAdding subdomains in haproxy for CORSS3/Cloudfront CORS working on some files onlynginx: CORS headers are not added for OPTIONS requesthtaccess conditional header set is ignoring the condition

Does polymorph use a PC’s CR or its level?

Is above average number of years spent on PhD considered a red flag in future academia or industry positions?

List *all* the tuples!

Are my PIs rude or am I just being too sensitive?

Doubts about chords

How do I mention the quality of my school without bragging

Is high blood pressure ever a symptom attributable solely to dehydration?

If a contract sometimes uses the wrong name, is it still valid?

How much radiation do nuclear physics experiments expose researchers to nowadays?

Sorting numerically

Why is black pepper both grey and black?

Models of set theory where not every set can be linearly ordered

Does accepting a pardon have any bearing on trying that person for the same crime in a sovereign jurisdiction?

Stars Make Stars

"Seemed to had" is it correct?

Do I really need recursive chmod to restrict access to a folder?

Single word antonym of "flightless"

Can a non-EU citizen traveling with me come with me through the EU passport line?

Is there a way in Ruby to make just any one out of many keyword arguments required?

How widely used is the term Treppenwitz? Is it something that most Germans know?

How discoverable are IPv6 addresses and AAAA names by potential attackers?

What LEGO pieces have "real-world" functionality?

Did Xerox really develop the first LAN?

Bonus calculation: Am I making a mountain out of a molehill?



.htaccess CORS headers not working



Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!How to solve “ExpiresActive not allowed here” error message in .htaccess file?How do I add Access-Control-Allow-Origin in NGINX?Access-Control-Allow-Origin “*” not allowed when credentials flag is true.htaccess Not Working Despite AllowOverride AllSetting Access-Control-Allow-Origin in .htaccess for Https protocolCORS headers not added in ApacheAdding subdomains in haproxy for CORSS3/Cloudfront CORS working on some files onlynginx: CORS headers are not added for OPTIONS requesthtaccess conditional header set is ignoring the condition



.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








3















I've added the following at the top of my .htaccess file:



<IfModule mod_headers.c>
Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Headers "Content-Type, Authorization"
Header always set Access-Control-Allow-Methods "GET,PUT,POST,DELETE"
Header always set Access-Control-Allow-Credentials true
</IfModule>


In order to allow a subdomain-served login screen to do an AJAX Request to the main domain. It works on localhost, but not on the actual server. I've googled around quite a lot but there doesn't seem to be a solution for this. I've already checked through SSH if apache mod_headers was loaded, and the LoadModule line is there on the httpd.conf file.










share|improve this question







New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.















  • 1





    When you have access to the httpd.conf file please don't use .htaccess files but place your desired settings in the main httpd.conf httpd.apache.org/docs/2.4/howto/htaccess.html#when

    – HBruijn
    Apr 10 at 14:12











  • Remove the <IfModule> wrapper. Any error? Are .htaccess overrides enabled?

    – MrWhite
    Apr 10 at 14:19











  • @MrWhite I already tested removing the IfModule but there was no difference nor errors. There's no override line in .htaccess

    – Joaquin Guevara
    Apr 10 at 14:24






  • 3





    The appropriate AllowOverride directive needs to be set in the server config before these directives in .htaccess will do anything.

    – MrWhite
    Apr 10 at 14:26






  • 1





    @MrWhite I've checked and the AllowOverride directive is there. Also, other directices in .htaccess work properly.

    – Joaquin Guevara
    Apr 11 at 6:23

















3















I've added the following at the top of my .htaccess file:



<IfModule mod_headers.c>
Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Headers "Content-Type, Authorization"
Header always set Access-Control-Allow-Methods "GET,PUT,POST,DELETE"
Header always set Access-Control-Allow-Credentials true
</IfModule>


In order to allow a subdomain-served login screen to do an AJAX Request to the main domain. It works on localhost, but not on the actual server. I've googled around quite a lot but there doesn't seem to be a solution for this. I've already checked through SSH if apache mod_headers was loaded, and the LoadModule line is there on the httpd.conf file.










share|improve this question







New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.















  • 1





    When you have access to the httpd.conf file please don't use .htaccess files but place your desired settings in the main httpd.conf httpd.apache.org/docs/2.4/howto/htaccess.html#when

    – HBruijn
    Apr 10 at 14:12











  • Remove the <IfModule> wrapper. Any error? Are .htaccess overrides enabled?

    – MrWhite
    Apr 10 at 14:19











  • @MrWhite I already tested removing the IfModule but there was no difference nor errors. There's no override line in .htaccess

    – Joaquin Guevara
    Apr 10 at 14:24






  • 3





    The appropriate AllowOverride directive needs to be set in the server config before these directives in .htaccess will do anything.

    – MrWhite
    Apr 10 at 14:26






  • 1





    @MrWhite I've checked and the AllowOverride directive is there. Also, other directices in .htaccess work properly.

    – Joaquin Guevara
    Apr 11 at 6:23













3












3








3








I've added the following at the top of my .htaccess file:



<IfModule mod_headers.c>
Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Headers "Content-Type, Authorization"
Header always set Access-Control-Allow-Methods "GET,PUT,POST,DELETE"
Header always set Access-Control-Allow-Credentials true
</IfModule>


In order to allow a subdomain-served login screen to do an AJAX Request to the main domain. It works on localhost, but not on the actual server. I've googled around quite a lot but there doesn't seem to be a solution for this. I've already checked through SSH if apache mod_headers was loaded, and the LoadModule line is there on the httpd.conf file.










share|improve this question







New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












I've added the following at the top of my .htaccess file:



<IfModule mod_headers.c>
Header always set Access-Control-Allow-Origin "*"
Header always set Access-Control-Allow-Headers "Content-Type, Authorization"
Header always set Access-Control-Allow-Methods "GET,PUT,POST,DELETE"
Header always set Access-Control-Allow-Credentials true
</IfModule>


In order to allow a subdomain-served login screen to do an AJAX Request to the main domain. It works on localhost, but not on the actual server. I've googled around quite a lot but there doesn't seem to be a solution for this. I've already checked through SSH if apache mod_headers was loaded, and the LoadModule line is there on the httpd.conf file.







.htaccess cors






share|improve this question







New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question







New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question






New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked Apr 10 at 14:05









Joaquin GuevaraJoaquin Guevara

161




161




New contributor




Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






Joaquin Guevara is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.







  • 1





    When you have access to the httpd.conf file please don't use .htaccess files but place your desired settings in the main httpd.conf httpd.apache.org/docs/2.4/howto/htaccess.html#when

    – HBruijn
    Apr 10 at 14:12











  • Remove the <IfModule> wrapper. Any error? Are .htaccess overrides enabled?

    – MrWhite
    Apr 10 at 14:19











  • @MrWhite I already tested removing the IfModule but there was no difference nor errors. There's no override line in .htaccess

    – Joaquin Guevara
    Apr 10 at 14:24






  • 3





    The appropriate AllowOverride directive needs to be set in the server config before these directives in .htaccess will do anything.

    – MrWhite
    Apr 10 at 14:26






  • 1





    @MrWhite I've checked and the AllowOverride directive is there. Also, other directices in .htaccess work properly.

    – Joaquin Guevara
    Apr 11 at 6:23












  • 1





    When you have access to the httpd.conf file please don't use .htaccess files but place your desired settings in the main httpd.conf httpd.apache.org/docs/2.4/howto/htaccess.html#when

    – HBruijn
    Apr 10 at 14:12











  • Remove the <IfModule> wrapper. Any error? Are .htaccess overrides enabled?

    – MrWhite
    Apr 10 at 14:19











  • @MrWhite I already tested removing the IfModule but there was no difference nor errors. There's no override line in .htaccess

    – Joaquin Guevara
    Apr 10 at 14:24






  • 3





    The appropriate AllowOverride directive needs to be set in the server config before these directives in .htaccess will do anything.

    – MrWhite
    Apr 10 at 14:26






  • 1





    @MrWhite I've checked and the AllowOverride directive is there. Also, other directices in .htaccess work properly.

    – Joaquin Guevara
    Apr 11 at 6:23







1




1





When you have access to the httpd.conf file please don't use .htaccess files but place your desired settings in the main httpd.conf httpd.apache.org/docs/2.4/howto/htaccess.html#when

– HBruijn
Apr 10 at 14:12





When you have access to the httpd.conf file please don't use .htaccess files but place your desired settings in the main httpd.conf httpd.apache.org/docs/2.4/howto/htaccess.html#when

– HBruijn
Apr 10 at 14:12













Remove the <IfModule> wrapper. Any error? Are .htaccess overrides enabled?

– MrWhite
Apr 10 at 14:19





Remove the <IfModule> wrapper. Any error? Are .htaccess overrides enabled?

– MrWhite
Apr 10 at 14:19













@MrWhite I already tested removing the IfModule but there was no difference nor errors. There's no override line in .htaccess

– Joaquin Guevara
Apr 10 at 14:24





@MrWhite I already tested removing the IfModule but there was no difference nor errors. There's no override line in .htaccess

– Joaquin Guevara
Apr 10 at 14:24




3




3





The appropriate AllowOverride directive needs to be set in the server config before these directives in .htaccess will do anything.

– MrWhite
Apr 10 at 14:26





The appropriate AllowOverride directive needs to be set in the server config before these directives in .htaccess will do anything.

– MrWhite
Apr 10 at 14:26




1




1





@MrWhite I've checked and the AllowOverride directive is there. Also, other directices in .htaccess work properly.

– Joaquin Guevara
Apr 11 at 6:23





@MrWhite I've checked and the AllowOverride directive is there. Also, other directices in .htaccess work properly.

– Joaquin Guevara
Apr 11 at 6:23










0






active

oldest

votes












Your Answer








StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);






Joaquin Guevara is a new contributor. Be nice, and check out our Code of Conduct.









draft saved

draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962436%2fhtaccess-cors-headers-not-working%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes








Joaquin Guevara is a new contributor. Be nice, and check out our Code of Conduct.









draft saved

draft discarded


















Joaquin Guevara is a new contributor. Be nice, and check out our Code of Conduct.












Joaquin Guevara is a new contributor. Be nice, and check out our Code of Conduct.











Joaquin Guevara is a new contributor. Be nice, and check out our Code of Conduct.














Thanks for contributing an answer to Server Fault!


  • Please be sure to answer the question. Provide details and share your research!

But avoid


  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962436%2fhtaccess-cors-headers-not-working%23new-answer', 'question_page');

);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company