Cross-Origin Resource (CORs) settings - Intergraph Smart 3D Web API - Update 2 - Installation & Upgrade - Hexagon

AllowedOrigins

The list of origins allowed access to the resource. The list may consist of one or more URIs, or a wild-card (*) can be used to allow access to all origins.

*

AllowedMethods

The list of methods supported by the resource. The list may consist of one or more HTTP methods. If the list is empty, then CORS preflight requests are not supported.

• For the Plant API - Supported request methods are GET, POST, PUT, and PATCH.

• For the Admin API - Supported request methods are GET, POST, PUT, DELETE, and PATCH.

• For the Plant API - GET,POST,PUT,PATCH

• For the Admin API - GET,POST,PUT,
  DELETE,PATCH

AllowedHeaders

The list of HTTP headers supported by the resource. The list may consist of zero or more header field names, or a wild-card (*) can be used to allow all headers.

*

ExposedHeaders

The list of exposed headers that the resource might use and that can be exposed. The list may consist of zero or more header field names.

No default value

AllowCredentials

Value indicating whether the resource supports user credentials in the request.

false

PreflightMaxAge

The number of seconds the results of a preflight request can be cached on a client in a preflight result cache.

600 seconds