How deeply does Spring in Action, Sixth Edition cover CORS?

Explains the browser restriction and demonstrates annotation-based origin configuration, but does not detail CORS protocol exchanges.

CORS

As explained in Spring in Action, Sixth Edition

CORS is a web security mechanism that allows a server to declare which origins may access its resources from browser-based clients.

CORS (cross-origin resource sharing) lets a server declare which browser-based clients may access its resources. Browsers commonly block a JavaScript interface hosted on a different host or port from consuming an API; CORS response headers provide the permitted exception. section 7.1.1

In Spring, apply CORS with @CrossOrigin. Set origins to the allowed client origin, such as http://tacocloud:8080, or provide an array when multiple origins need access. section 7.1.1

Allow a separate Taco Cloud client

@RestController @RequestMapping(path="/api/tacos", produces="application/json") @CrossOrigin(origins={"http://tacocloud:8080", "http://tacocloud.com"}) public class TacoController { ... } This controller permits browser clients from the two listed origins to consume the JSON API.

How Spring in Action, Sixth Edition covers it

Cover of Spring in Action, Sixth Edition

liveBook manning.com

Read Spring in Action, Sixth Edition on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

ASP.NET Core in Action, 3eCross-origin resource sharing is a browser and server mechanism that controls whether a web application may make requests across origins and which parts of those requests and responses are permitted.
liveBook manning.com

Building Web APIs with ASP.NET CoreCross-Origin Resource Sharing (CORS) is a browser security mechanism that controls whether web clients may request resources from a different origin.
liveBook manning.com

Spring Security in Action, Second EditionCross-origin resource sharing is a browser security mechanism that controls whether a web page may access resources from another origin.
liveBook manning.com

Build Financial Software with Generative AI (From Scratch)Cross-Origin Resource Sharing (CORS) is a browser security mechanism that controls whether a web page may request resources from a different origin.

Compare how 5 books explain CORS →

Related concepts

@crossoriginconfigured by · @CrossOrigin is a Spring annotation that enables and configures cross-origin resource sharing for a controller or request handler.
cross-origin requestconfigures · A cross-origin request is a network request from a webpage or script to a resource whose origin differs from the requester’s origin.
HTTP headeruses · An HTTP header is a named metadata field in an HTTP request or response that conveys information about the message or directs its processing.
cross-origin policyaddresses · The same-origin policy is a browser security restriction that limits scripts and documents from accessing resources associated with different origins unless explicitly permitted.
HTTP GETuses · HTTP GET is a request method for retrieving a representation of a resource identified by the request target, without requesting a state change.

This explainer was generated by Manning's knowledge graph from the text of Spring in Action, Sixth Edition. The section links point to the parts of the book it draws on.