Target Audience: Technical Support
How it works at the implementation level
We have made this document about how CORS works in the portal and how it is configured, Rich is already working on including it in the official documentation.
What do WebContextCORSConfiguration and PortalCORSConfiguration control?
WebContextCORSConfiguration (System Settings - Security Tools - Web Contexts Cross Resource Origin Sharing (CORS)): Allows the user to configure CORS headers of those own services that have developed within the portal.
PortalCORSConfiguration (System Settings - Security Tools - Portal Cross Resource Origin Sharing (CORS)): Allows the user to configure CORS headers for existing portal services.
Key classes that engineers may need to debug/touch in case of bugs
Everything related to CORS is under the modules: portal-remote-cors-api (annotation and configuration classes) and portal-remote-cors-impl (JAXS dynamic feature, servlet filters, validator and headers writer)