From 108a12e5c52c8c467c8e4d1917cb5763a3bde2e6 Mon Sep 17 00:00:00 2001 From: James Lyne Date: Tue, 10 May 2022 13:07:57 +0100 Subject: [PATCH] Updated Configuring Multiple Servers (markdown) --- Configuring-Multiple-Servers.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/Configuring-Multiple-Servers.md b/Configuring-Multiple-Servers.md index c327c31..adca0be 100644 --- a/Configuring-Multiple-Servers.md +++ b/Configuring-Multiple-Servers.md @@ -18,7 +18,9 @@ This subdirectory-based approach was chosen for its relative simplicity and beca LiveAtlas needs to be able to make requests to each configured server from the visitor's browser. This means all of your configured server URLs need to be publicly accessible, and meet all browser imposed restrictions: - - If your servers are accessed via a [different origin](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy#definition_of_an_origin) to LiveAtlas itself, then you will need to ensure [CORS headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) are configured correctly. Headers for the Dynmap internal webserver can be configured using Dynmap's [http-response-headers setting](https://github.com/webbukkit/dynmap/wiki/Configuration.txt#http-response-headers) + - If your servers are accessed via a [different origin](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy#definition_of_an_origin) to LiveAtlas itself, then you will need to ensure [CORS headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) are configured correctly. + +Requests for map information should return an appropriate `Access-Control-Allow-Origin` header as well as `Access-Control-Allow-Credentials: true`. Headers for the Dynmap internal webserver can be configured using Dynmap's [http-response-headers setting](https://github.com/webbukkit/dynmap/wiki/Configuration.txt#http-response-headers) Alternatively, you can configure your webserver as a reverse proxy and make all individual servers accessible from the same origin LiveAtlas is hosted on, which will avoid this issue.