Cross-Origin Resource Sharing (CORS)

Niamh Ferns Updated by Niamh Ferns

The same-origin policy has been adopted by all browsers to protect API been used by scripts from different domains. Cross-Origin Resource Sharing (CORS) is an HTTP header-based mechanism that allows a server to indicate any origins other than its own from which a browser should permit loading resources.

By default, the DeskDirector server only allows its own web application to hit the API in the browser. By defining an additional domain in our CORS settings, you can allow third party application to consume the DeskDirector API in the browser.

Such capability allows you to create your own application that can be embedded in our client or TECH portal to provide extended functionality. Since the application you have developed will be hosted under a different domain, you will need to add the domain in Admin Portal before they can query our API.

Best Practice

In general, you should not use this feature unless you have an embedded page that needs to use the DeskDirector API from a browser.

How did we do?

Content-Security-Policy

Contact