Onshape REST API using JavaScript

Comments

• jakeramsley Member, Moderator, Onshape Employees, Developers Posts: 657

  June 2018

  Can you give a little context why you want to use a Date header for a client request call?

  Jake Ramsley

  
  

  Director of Quality Engineering & Release Manager              onshape.com

  0
• awk Member, Onshape Employees, Developers Posts: 78

  June 2018

  The browser prevents javascript from setting a number of headers as a mechanism to stop forms of Cross Site Scripting and/or replay attacks from a compromised client. There is no work-around to avoid the browser if you're trying to set some header values from javascript in the browser.
  
  I'd echo Jake's point too - why do you need to set the Dates header on a REST API call? I can't think of any of our APIs that are particularly specific to the Date header. Furthermore we expect the REST API calls to be made from a server context and not directly from a browser.

  Director of API, Appstore, and App Partner Technical Support
  

  0
• gary_clough057 Member Posts: 7 ✭

  June 2018

  Thank you for your replies... Based on the sample code from GitHub demonstrating the usage of the API Key ( https://github.com/onshape-public/apikey ) I was under the impression it was required.  I tried removing it from the Node.js example and I got a 401 unathorized.  Here are the Headers that are working with the Node.js and C# implementations:
  

      headers['On-Nonce'] = onNonce;

      headers['Date'] = authDate;

      headers['Authorization'] = asign;

      headers['Accept'] = 'application/vnd.onshape.v1+json';

  
  Thanks again for the help.
  

  0