Communication between IDM and M3 by script

Legacy Contributor

Hello everyone,

I tried to take as an example the behavior of a webmashup communicating with the same IDM server, calling the same address, but in my case, I got an error.

I'm trying to search on IDM from a JavaScript by Ajax with the address "https://<IDM Server>/ca/api/items/search?query=..." but I'm stuck because of a CORS error in Google Chrome. I tried to connect before with the address "https://<IDM Server>/ca/api/connection/login" but I got the same CORS error.

Can you help me determine what I am doing wrong ?

Thank you kindly.

Legacy Contributor

Hi,
A CORS error is always caused by your script now being loaded on a page that is from the same server as the API you are trying to call. Some applications will support CORS, meaning that it will either be completely open or that it has a list of server from which it would allow Ajax script calls. IDM does not support CORS and does not have such a list. Just to mention it here there is ION API that supports CORS that might be an option in some cases when you can get an OAuth token.

In this case your script is not loaded from the IDM server, it's probably an M3 script and it is loaded from the M3 server. If IDM and M3 is installed in the same grid then you may call the API directly with an relative URL even, /ca/api/items/search?query=.

As IDM was moved to the InforOS grid it was no longer possible to do these kind of calls, due to CORS but also due to SSO if you are not running M3 in Ming.le.

For that there is an IDM proxy that can be installed in the M3 grid. Verify that you have the proxy installed and configured in your M3 grid. I don't know the exact application name for it, perhaps IDM Proxy? It should be registered to the /ca/ root in the grid.

If that is the case you should be able to use a completely relative link /ca/api/items/search?query= and as you are calling the M3 server there will be no CORS error. Using a relative link has another advantage and that is that you can move the script between servers without modifying it.

If this script is not loaded from M3 I need to know where it is deployed and how it is loaded to be able to help you more.