[x3d-public] [consortium] Cross Origin Access, CORS support for X3DOM editor

Mon May 22 03:17:08 PDT 2023

1.	Leonard, am still hoping we can get models the following two
archives handled similarly.  Please advise if there are any difficulties
with this.

*
https://x3dgraphics.com/examples/X3dForWebAuthors/Chapter01TechnicalOverview
/HelloWorld.x3d
*
https://x3dgraphics.com/examples/X3dForAdvancedModeling/HelloWorldScenes/Hel
loWorld.x3d

2.	Also when time permits, request details on the web3d.org server
configuration that you accomplished.  Can ensure that there is nothing
revealing (security-wise) and then our CORS documentation can be updated for
use by other server administrators hosting X3D models.

*	X3D Scene Authoring Hints: CORS
*
https://www.web3d.org/x3d/content/examples/X3dSceneAuthoringHints.html#CORS

3.	Holger, if you decide to add something similar to X_ITE's repertoire
of capabilities, please let me know and I will add autogeneration of
corresponding links to all of the individual Web3D example pages.

4.	Michalis (for view3dscene) and Doug (for FreeWRL) it is interesting
to consider options for tools to launch such an editable viewer.

I'll be adding that as a menu option for X3D-Edit, once we finish our build
transition to github in support of NetBeans native plugin capability.

X3D-Edit already can publish scenes to X_ITE and X3DOM, similarly such
utility methods are part of Java X3DJSAIL library and Python X3DPSAIL x3d.py
library.  Am looking forward to adding these further utility methods for
returning X3DOM Editor links.

The more we facilitate CORS the better, it handles important Web security
issues that have protected HTML5 pages as well.

all the best, Don

-- 

Don Brutzman  Naval Postgraduate School, Code USW/Br        brutzman at nps.edu

Watkins 270,  MOVES Institute, Monterey CA 93943-5000 USA    +1.831.656.2149

X3D graphics, virtual worlds, navy robotics https://faculty.nps.edu/brutzman

From: Brutzman, Donald (Don) (CIV) 
Sent: Friday, May 12, 2023 1:01 AM
To: Web3D WebServices <webmaster at web3d.org>; x3d-public at web3d.org;
Consortium <consortium at web3d.org>
Cc: brutzman at nps.edu
Subject: RE: [consortium] Cross Origin Access, CORS support for X3DOM editor

Thank you for correctly diagnosing the problem with ConformanceNist
examples, Leonard.   I have fixed the corresponding stylesheet and all
conversions of web3d.org content should be OK now.  Additional examples:

*	X3D Example Archives: Conformance Nist, Appearance, Appearance,
material
*	Test of Appearance node ability to accept a Material node as an
argument for the material field.
*
https://www.web3d.org/x3d/content/examples/ConformanceNist/Appearance/Appear
ance/materialIndex.html
*
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/ConformanceNist/Appearance/Appearance/material.
x3d

*	X3D Example Archives: Conformance Nist, STEP, CTC 03, Nist Ctc 03
Asme 1 Ap 203 Occ
*	NIST Product and Manufacturing Information (PMI) Complex Test Case
3.
*
https://www.web3d.org/x3d/content/examples/ConformanceNist/STEP/CTC03/NistCt
c03Asme1Ap203OccIndex.html
*
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/ConformanceNist/STEP/CTC03/NistCtc03Asme1Ap203O
cc.x3d

all the best, Don

-- 

Don Brutzman  Naval Postgraduate School, Code USW/Br        brutzman at nps.edu
<mailto:brutzman at nps.edu> 

Watkins 270,  MOVES Institute, Monterey CA 93943-5000 USA    +1.831.656.2149

X3D graphics, virtual worlds, navy robotics https://faculty.nps.edu/brutzman

From: x3d-public x3d-public-bounces at web3d.org
<mailto:x3d-public-bounces at web3d.org>  On Behalf Of Web3D WebServices
Sent: Thursday, May 11, 2023 6:07 AM
To: x3d-public at web3d.org <mailto:x3d-public at web3d.org> 
Subject: Re: [x3d-public] [consortium] Cross Origin Access, CORS support for
X3DOM editor

The one listed issue is that there is no file at the specified URL. There
needs to be another 'Appearance/' in the path. 

Leonard Daly

From: Brutzman, Donald (Don) (CIV) 
Sent: Thursday, May 11, 2023 1:39 AM
To: Web3D WebServices <webmaster at web3d.org <mailto:webmaster at web3d.org> >;
x3d-public at web3d.org <mailto:x3d-public at web3d.org> ; Consortium
<consortium at web3d.org <mailto:consortium at web3d.org> >
Cc: brutzman at nps.edu <mailto:brutzman at nps.edu> 
Subject: RE: [consortium] Cross Origin Access, CORS support for X3DOM editor

Building on this great work:

Links to X3DOM editor are now available for each of the 2000 scenes in
archives served by web3d.org server.

*	https://www.web3d.org/x3d/content/examples/Basic
*	https://www.web3d.org/x3d/content/examples/ConformanceNist
*	https://www.web3d.org/x3d/content/examples/HumanoidAnimation
*	https://www.web3d.org/x3d/content/examples/Vrml2Sourcebook

Spot-check examples:

*	X3D Example Archives: Basic, Chemical Markup Language, Caffeine
*	Autogenerated version of Caffeine.x3d scene produced from
Caffeine.xml Chemical Markup Language (CML) version 1.0 source file.
*
https://www.web3d.org/x3d/content/examples/Basic/ChemicalMarkupLanguage/Caff
eineIndex.html then X3DOM (
<https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.w
eb3d.org/x3d/content/examples/Basic/ChemicalMarkupLanguage/Caffeine.x3d>
editor)
*
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/Basic/ChemicalMarkupLanguage/Caffeine.x3d

*	X3D Example Archives: Humanoid Animation, Characters, Jin LOA 3
*	Articulated 3D game character designed with a general graphics tool,
then converted into an X3D HAnim model.
*
https://www.web3d.org/x3d/content/examples/HumanoidAnimation/Characters/JinL
OA3Index.html 
*
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/HumanoidAnimation/Characters/JinLOA3.x3d

*	X3D Example Archives: VRML 2 Sourcebook, Siggraph 98 Course, Robots
*	Robot generator prototype to create multiple new nodes.
*
https://www.web3d.org/x3d/content/examples/Vrml2Sourcebook/Siggraph98Course/
RobotsIndex.html
*
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/Vrml2Sourcebook/Siggraph98Course/Robots.x3d
*	user warning: all those high-intensity eyes following me around
makes me nervous. 8)

Problem: ConformanceNist examples do not appear to be getting handled
properly.  Example:

*
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/ConformanceNist/Appearance/material.x3d
*
web3d.org/x3d/content/examples/ConformanceNist/Appearance/material.x3d' from
origin 'https://andreasplesch.github.io' has been blocked by CORS policy: No
'Access-Control-Allow-Origin' header is present on the requested resource.
If an opaque response serves your needs, set the request's mode to 'no-cors'
to fetch the resource with CORS disabled.

Leonard, when you are satisfied that everything is set up OK for web3d.org
CORS, I hope that you can configure x3dgraphics.com CORS similarly.

all the best, Don

-- 

Don Brutzman  Naval Postgraduate School, Code USW/Br        brutzman at nps.edu
<mailto:brutzman at nps.edu> 

Watkins 270,  MOVES Institute, Monterey CA 93943-5000 USA    +1.831.656.2149

X3D graphics, virtual worlds, navy robotics https://faculty.nps.edu/brutzman

From: Brutzman, Donald (Don) (CIV) <brutzman at nps.edu
<mailto:brutzman at nps.edu> > 
Sent: Sunday, May 7, 2023 9:14 PM
To: Web3D WebServices <webmaster at web3d.org <mailto:webmaster at web3d.org> >;
x3d-public at web3d.org <mailto:x3d-public at web3d.org> ; Consortium
<consortium at web3d.org <mailto:consortium at web3d.org> >
Cc: Brutzman, Donald (Don) (CIV) <brutzman at nps.edu <mailto:brutzman at nps.edu>
>
Subject: RE: [consortium] Cross Origin Access, CORS support for X3DOM editor

Wow very powerful results, thanks Leonard for excellent work.

There are quite a few CORS references online as follows, additional
suggestions are welcome.

*	X3D Scene Authoring Hints: CORS
*
https://www.web3d.org/x3d/content/examples/X3dSceneAuthoringHints.html#CORS

Also thanks Andreas for making this capability available.  Again wow.

Looking forward to continued experimentation and progress.

all the best, Don

-- 

Don Brutzman  Naval Postgraduate School, Code USW/Br        brutzman at nps.edu
<mailto:brutzman at nps.edu> 

Watkins 270,  MOVES Institute, Monterey CA 93943-5000 USA    +1.831.656.2149

X3D graphics, virtual worlds, navy robotics https://faculty.nps.edu/brutzman

From: consortium <consortium-bounces at web3d.org
<mailto:consortium-bounces at web3d.org> > On Behalf Of Web3D WebServices
Sent: Sunday, May 7, 2023 8:45 PM
To: x3d-public at web3d.org <mailto:x3d-public at web3d.org> ; Consortium
<consortium at web3d.org <mailto:consortium at web3d.org> >
Subject: [consortium] Cross Origin Access

The entirety of the https://www.web3d.org/x3d/content directory tree has
been made cross-origin accessible. Existing restricting apply on the actual
request. That means that a request by a browser running a web page from a
host different from https://www.web3d.org/ can request access to any file in
https://www.web3d.org/x3d/content/*. The browser should grant Cross Origin
access (aka CORS) to that request. The Web3D server will separately
determine if the request will be granted.

For example, various X3D worlds in
https://www.web3d.org/x3d/content/examples/Basic can be displayed in
Andreas' X3DOM viewer at
https://andreasplesch.github.io/Library/Viewer/index.html, specifically
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.we
b3d.org/x3d/content/examples/HelloWorld.x3d does display this example.

The access controls are a little looser than I would like. I plan on
tightening them up over the next week for all files not in
https://www.web3d.org/x3d/content/examples/. If files not in that path need
CORS support OR files in that path should not have CORS support, then please
let me know right away.

-- 
Leonard Daly
WebServices, Web3D Consortium
President, Daly Realism - Creating the Future

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20230522/f0e73eec/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5464 bytes
Desc: not available
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20230522/f0e73eec/attachment-0001.p7s>