/clientheaders in dispatcher

Question

Hi Team,

/clientheaders in dispatcher is used for validation the headers or just adding headers into request headers ? As well as please give me an example how to add content type or cross origin policies through clientheaders ?

Thanks

joerghoh · Accepted Answer

With this configuration you can just define the name of the HTTP header, which is copied over from the request the user made to the dispatcher into the request the dispatcher makes to AEM. You cannot add custom headers with specific values into the request to AEM with this configuration parameter.

aanchal-sikka · Answer

Hello @jakecham

The /clientheaders is meant to define the headers that can pass-through from client to AEM.

For content-type refer to following:

/clientheaders { 
  # Retain any existing headers
  "CSRF-Token"
  "X-Forwarded-Proto"
  "referer"
  "user-agent"
  "authorization"
  "from"
  "content-type"
   ....
}

For CORS, please refer to https://experienceleague.adobe.com/docs/experience-manager-learn/foundation/security/understand-cross-origin-resource-sharing.html?lang=en#allowing-cors-request-headers

/clientheaders {
   ...
   "Origin"
   "Access-Control-Request-Method"
   "Access-Control-Request-Headers"
}

Example for custom-header is available on: https://techrevel.blog/2023/09/05/exploring-aem-request-and-response-headers-analysis-of-browser-cdn-and-dispatcher/

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded