Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-21455

Enable to configure CORS on embedded elasticsearch cluster

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 8.10
    • Fix Version/s: 8.10-HF04, 9.1
    • Component/s: Elasticsearch

      Description

      Since ES upgrade to 2.x (NXP-19194) it is not possible to use plugin like elasticsearch-head on a standalone Nuxeo instance (with Elasticsearch 2.3 embedded).
      It was working with Nuxeo < 8.10 because the CORS are enabled (http.cors.enabled = true) but since Elasticsearch 2.x the default origin (http.cors.allow-origin) changes from ALL (*) to deny for security reason.

      The result is that Elasticsearch embedded is always answering with 403.
      The allow origin should be configurable and may be with a default like http://localhost:.*|file:.*.

      It is now possible to use Elasticsearch tools to inspect (like elasticsearch-head) and query (like mirage) on Nuxeo index when Elasticsearch is embedded.

        Attachments

        1. NXP-21455.patch
          2 kB
          Benoit Delbosc

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: