How to handle cross-domain web service calls from JS in Orchard CMS

javascript .net cross-domain orchardcms cors
jfielaidof picture jfielaidof · Oct 3, 2013 · Viewed 10.1k times · Source

I am trying to call a web service cross domain from within an HTML widget. This does not seem to work. It worked great under the same domain. I am trying to create a log in page within Orchard that could be used to log in to my software on another domain. The web service is validating the user credentials and returning a boolean which then would generate the users authentication.

I read that I could use an HTTP Handler or another web service (on the Orchard side) to call the web service on the other domain, but I'm not familiar enough with MVC or Orchard to do this. How can I add one of these to my Orchard web application?

Answer

Piotr Szmyd picture Piotr Szmyd · Oct 3, 2013

Cross-domain calls from within client-side code are a no-no in all major browsers. You can either

  1. Use CORS, ie. set Access-Control-Allow-Origin header to http://your-caller-domain.com in the web service response to allow requests originating from your website domain
  2. Use JSONP technique
  3. Create a custom proxy API within your application (using plain ASP.NET MVC controller or a WebAPI one) that will perform the call on server side using WebClient class and return the response to you.

Options are ordered from best to worst. CORS is supported by most browsers, except IE8/9 (which have partial support via XDomainRequest) and older. There are workarounds for this though.

Note that first two involve changes on the web-service side - if you can't do it, option 3. is the only one left.

Related questions

How to access Session variables and set them in javascript?

In code-behind I set Session with some data. Session["usedData"] = "sample data"; And the question is how can I get the Session value(in my example; "sample data") in javascript and set Session["usedData"] with a new value?

Read More
How to disable postback on an asp Button (System.Web.UI.WebControls.Button)

I have an asp button. It's server-side so I can only show it for logged in users, but i want it to run a javascript function and it seems when it's runat="server" it always calls the postback event. I …

Read More
How to convert View Model into JSON object in ASP.NET MVC?

I am a Java developer, new to .NET. I am working on a .NET MVC2 project where I want to have a partial view to wrap a widget. Each JavaScript widget object has a JSON data object that would be …

Read More