[x3d-public] [consortium] Cross Origin Access, CORS support for X3DOM editor

[Brutzman, Donald (Don) (CIV)]

Wow very powerful results, thanks Leonard for excellent work.

 

There are quite a few CORS references online as follows, additional
suggestions are welcome.

*	X3D Scene Authoring Hints: CORS
*
https://www.web3d.org/x3d/content/examples/X3dSceneAuthoringHints.html#CORS

 

Also thanks Andreas for making this capability available.  Again wow.

 

Looking forward to continued experimentation and progress.

 

all the best, Don

-- 

Don Brutzman  Naval Postgraduate School, Code USW/Br        brutzman at nps.edu

Watkins 270,  MOVES Institute, Monterey CA 93943-5000 USA    +1.831.656.2149

X3D graphics, virtual worlds, navy robotics https://faculty.nps.edu/brutzman

 

From: consortium <consortium-bounces at web3d.org> On Behalf Of Web3D
WebServices
Sent: Sunday, May 7, 2023 8:45 PM
To: x3d-public at web3d.org; Consortium <consortium at web3d.org>
Subject: [consortium] Cross Origin Access

 

The entirety of the https://www.web3d.org/x3d/content directory tree has
been made cross-origin accessible. Existing restricting apply on the actual
request. That means that a request by a browser running a web page from a
host different from https://www.web3d.org/ can request access to any file in
https://www.web3d.org/x3d/content/*. The browser should grant Cross Origin
access (aka CORS) to that request. The Web3D server will separately
determine if the request will be granted.

For example, various X3D worlds in
https://www.web3d.org/x3d/content/examples/Basic can be displayed in
Andreas' X3DOM viewer at
https://andreasplesch.github.io/Library/Viewer/index.html
<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fandreaspl
esch.github.io%2FLibrary%2FViewer%2Findex.html&data=05%7C01%7Cbrutzman%40nps
.edu%7C537db110adfd47dd1ac208db4f769b50%7C6d936231a51740ea9199f7578963378e%7
C0%7C0%7C638191144696539383%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQ
IjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=Ykm5LZ5J1u8
ZnNRm0ZBfnjaIL%2BDviATej%2BItiiyzixM%3D&reserved=0> , specifically
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/HelloWorld.x3d
<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fandreaspl
esch.github.io%2FLibrary%2FViewer%2Findex.html%3Furl%3Dhttps%3A%2F%2Fwww.web
3d.org%2Fx3d%2Fcontent%2Fexamples%2FHelloWorld.x3d&data=05%7C01%7Cbrutzman%4
0nps.edu%7C537db110adfd47dd1ac208db4f769b50%7C6d936231a51740ea9199f757896337
8e%7C0%7C0%7C638191144696539383%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAi
LCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=PFANpfL
PQE71lAMV3SqICErPHE9lmxLxarTjIaZkTgA%3D&reserved=0>  does display this
example.

The access controls are a little looser than I would like. I plan on
tightening them up over the next week for all files not in
https://www.web3d.org/x3d/content/examples/. If files not in that path need
CORS support OR files in that path should not have CORS support, then please
let me know right away.

-- 
Leonard Daly
WebServices, Web3D Consortium
President, Daly Realism - Creating the Future

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20230508/726d61ca/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: HelloWorldX3domEditor.1600x1060.png
Type: image/png
Size: 616817 bytes
Desc: not available
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20230508/726d61ca/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5464 bytes
Desc: not available
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20230508/726d61ca/attachment-0001.p7s>