CORS header in XMLRPC::Transport::HTTP::Daemon

seaver has asked for the wisdom of the Perl Monks concerning the following question:

Monks:

I've been graced with an XMLRPC server running on an old machine. It's so old, I can't upgrade anything, but, nevertheless, the server still runs and accepts connections.

What has changed is that we've now got a web developer who's attempting to make these XML-RPC requests using JS, and for the first time, are coming up against CORB. So I spent a considerable amount of time trying to see if I can figure out how I can insert a CORS "Access-Control-Allow-Origin => *" key-value pair in the response header of the XMLRPC server.

It's being used in the most minimal sense, as in:

my $daemon = XMLRPC::Transport::HTTP::Daemon
  -> new (LocalPort => 8081, Reuse => 1)
  -> dispatch_to('module');
[download]

I've been reading through all of the documentation, up to the SOAP::Lite superclass, and trying to find an example, but I can't find one. What can I do?

Comment on CORS header in XMLRPC::Transport::HTTP::Daemon Download Code

Replies are listed 'Best First'.
Re: CORS header in XMLRPC::Transport::HTTP::Daemon by Corion (Patriarch) on Aug 25, 2018 at 06:45 UTC
SOAP::Lite implements the server part through https://metacpan.org/pod/distribution/SOAP-Lite/lib/SOAP/Transport.pod#SOAP::Transport::HTTP and https://metacpan.org/pod/distribution/SOAP-Lite/lib/SOAP/Transport.pod#SOAP::Transport::HTTP::Server. From reading the documentation, you can either replace the server class by your own server or monkeypatch the `->response` method to modify the response when it gets stored. `use SOAP::Transport::HTTP my $old_response = \&SOAP::Transport::HTTP::Server::response; SOAP::Transport::HTTP::Server::response = sub { my $resp = $old_response->( @_ ); $resp->headers->header('Access-Control-Allow-Origin' => ''); # is + this wise?! return $resp; };` [download]	[reply] [d/l] [select]

Replies are listed 'Best First'.

Re: CORS header in XMLRPC::Transport::HTTP::Daemon
by Corion (Patriarch) on Aug 25, 2018 at 06:45 UTC

SOAP::Lite implements the server part through https://metacpan.org/pod/distribution/SOAP-Lite/lib/SOAP/Transport.pod#SOAP::Transport::HTTP and https://metacpan.org/pod/distribution/SOAP-Lite/lib/SOAP/Transport.pod#SOAP::Transport::HTTP::Server.

From reading the documentation, you can either replace the server class by your own server or monkeypatch the ->response method to modify the response when it gets stored.

use SOAP::Transport::HTTP

my $old_response = \&SOAP::Transport::HTTP::Server::response;
*SOAP::Transport::HTTP::Server::response = sub {
    my $resp = $old_response->( @_ );
    $resp->headers->header('Access-Control-Allow-Origin' => '*'); # is
+ this wise?!
    return $resp;
};
[download]

[reply]
[d/l]
[select]