[openstreetmap/openstreetmap-website] gpx/create API dosn't work any more since recent website update (#1609)

[Robert Kaiser]

About a week ago, the upload feature in my https://lantea.kairo.at/ web app (which I heavily use for recording GPS tracks) stopped working, I'm getting the following error in a browser console:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at ‘https://api.openstreetmap.org/api/0.6/gpx/create’. (Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’). 

The problem is that CORS with a '*' doesn't work for XMLHttpRequest when credentials (HTTP Auth) are needed.
Before the website update that was done around August 1st, uploading GPX tracks with HTTP AUth worked fine.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1609
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170807/4f7429e9/attachment.html>