Powered by Smile CDR v2025.02.PRE

Showing documentation for 2025.02.PRE

On this page:

49.29 Credentials 49.31 Invoke Export

49.30.1Cross-Origin Resource Sharing (CORS)

The Cross-Origin Resource Sharing (CORS) configuration category includes the following configurable options:

CORS Allowed Request Headers
CORS Enabled
CORS Origins

49.30.2Property: CORS Allowed Request Headers

Property Name	CORS Allowed Request Headers
Property Key
Property Type	STRING
Description	A comma-separated list of allowable request headers for the CORS filter. These will be added in addition to the default headers required for Smile CDR's default functionality.
Applies to Modules	CDS Hooks REST Endpoint EasyShare SHL Endpoint (Admin) EasyShare SHL Endpoint (Public) FHIR Gateway REST Endpoint FHIR REST Endpoint (All FHIR Versions) FHIR REST Endpoint (DSTU2 - Deprecated) FHIR REST Endpoint (R3 - Deprecated) FHIR REST Endpoint (R4 - Deprecated) Hybrid Providers REST Endpoint JSON Admin API MDM UI Package Registry Endpoint Payer to Payer Product Portal SMART Outbound Security appSphere
Default Value	(no default)
Example Property	`module.[MODULE_ID].config.cors.allowed_headers =`

49.30.3Property: CORS Enabled

Property Name	CORS Enabled
Property Key
Property Type	BOOLEAN
Description	Should this endpoint allow the use of CORS? Enable this item only if you understand what it is doing.
Applies to Modules	CDS Hooks REST Endpoint EasyShare SHL Endpoint (Admin) EasyShare SHL Endpoint (Public) FHIR Gateway REST Endpoint FHIR REST Endpoint (All FHIR Versions) FHIR REST Endpoint (DSTU2 - Deprecated) FHIR REST Endpoint (R3 - Deprecated) FHIR REST Endpoint (R4 - Deprecated) Hybrid Providers REST Endpoint JSON Admin API MDM UI Package Registry Endpoint Payer to Payer Product Portal SMART Outbound Security appSphere
Default Value	`false`
Example Property	`module.[MODULE_ID].config.cors.enable = false`

49.30.4Property: CORS Origins

Property Name	CORS Origins
Property Key
Property Type	STRING
Description	A comma-separated list of allowable origins for the CORS filter. For example: `https://example.com, https://try.smilecdr.com:9201`. You may also use the wildcard value `*` to allow CORS for all domains, however this is generally not considered a good practice for production systems serving sensitive data.
Applies to Modules	CDS Hooks REST Endpoint EasyShare SHL Endpoint (Admin) EasyShare SHL Endpoint (Public) FHIR Gateway REST Endpoint FHIR REST Endpoint (All FHIR Versions) FHIR REST Endpoint (DSTU2 - Deprecated) FHIR REST Endpoint (R3 - Deprecated) FHIR REST Endpoint (R4 - Deprecated) Hybrid Providers REST Endpoint JSON Admin API MDM UI Package Registry Endpoint Payer to Payer Product Portal SMART Outbound Security appSphere
Default Value	`*`
Example Property	`module.[MODULE_ID].config.cors.origins = *`

49.29 Credentials 49.31 Invoke Export