GET Bucket CORS¶

You can use this operation to obtain CORS configuration information about a specified bucket.

Only users granted the s3:GetBucketCORS permission can perform this operation. By default, only the bucket owner can perform this operation. The bucket owner can allow other users to perform this operation by granting them the permission.

Request Syntax¶

GET /?cors HTTP/1.1
User-Agent: agent
Host: bucketname.obs.example.com
Accept: */*
Date: date
Authorization: authorization

Request Parameters¶

This request involves no parameters.

Request Headers¶

This request uses common headers. For details about common request headers, see section Common Request Headers.

Request Elements¶

This request involves no elements.

Response Syntax¶

HTTP/1.1 status_code
 Server: Server Name
 x-amz-request-id: id
 x-amz-id-2: id
 x-reserved: reserved info
 Content-Type: type
 Date: date
 Content-Length: lenth

 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <CORSConfiguration xmlns="http://obs.example.com/doc/2015-06-30/">
   <CORSRule>
     ...
   </CORSRule>
 </CORSConfiguration>

Response Headers¶

This response uses common headers. For details about common response headers, see section Common Response Headers.

Response Elements¶

This response contains elements to detail the CORS configuration. Table 1 describes the elements.

**Table 1** CORS configuration elements¶
Element	Description
CORSConfiguration	Indicates the CORSRules root node. The maximum size is 64 KB. Type: Container Ancestor: None
CORSRule	Indicates a CORS rule. CORSConfiguration can contain a maximum of 100 rules. Type: Container Ancestor: CORSConfiguration
ID	Indicates the unique identifier of a rule. The value can contain a maximum of 255 characters. Type: String Ancestor: Rule
AllowedMethod	Indicates a method that is allowed by a CORS rule. Type: String Valid values: GET, PUT, HEAD, POST, and DELETE Ancestor: Rule
AllowedOrigin	Indicates an origin that is allowed by a CORS rule. It is a character string and can contain a wildcard (``). Each AllowedOrigin* can only contain one wildcard (`*`). Type: String Ancestor: Rule
AllowedHeader	Indicates an allowed header (Access-Control-Request-Headers) in a CORS request. If a request contains Access-Control-Request-Headers, only a CORS request that matches the configuration of AllowedHeader is considered as a valid request. Each AllowedHeader can only contain one wildcard (`*`). Type: String Ancestor: Rule
MaxAgeSeconds	Indicates the response time of the CORS that can be cached by a server. It is expressed in seconds. Each CORSRule can contain only one MaxAgeSeconds. It can be set to a negative value. Type: Integer Ancestor: Rule
ExposeHeader	Indicates a supplemented header in CORS responses. The header provides additional information for servers. It cannot contain spaces. Type: String Ancestor: Rule

Error Responses¶

For details about other error responses, see Table 1. In addition, this response contains one special error, as described in Table 2.

**Table 2** Special error¶
Error Code	Description	HTTP Status Code
NoSuchCORSConfiguration	Indicates that the CORS configuration of buckets does not exist.	404 Not Found

Sample Request¶

GET /?cors HTTP/1.1
 User-Agent: curl/7.19.0 (x86_64-suse-linux-gnu) libcurl/7.19.0 OpenSSL/0.9.8{ zlib/1.2.3 libidn/1.10
 Host: bucketname.obs.example.com
 Accept: */*
 Date: Tue, 28 Apr 2015 09:11:35 +0000
 Authorization: AWS D13E0C94E722DD69423C:FJt2xJ1gEnozLSdpRNTJUoy6344=

Sample Response¶

HTTP/1.1 200 OK
 Server: OBS
 x-amz-request-id: C2D7CDD617B33354C3AA227BF2077071
 x-amz-id-2: xO3n8Q4eiJKCeAtG6U4nCSnDzhbBbMhgln8fcrOFYVGRJMc8KK/puQyr5bbSdjBU
 x-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc
 Content-Type: application/xml
 Date: Tue, 28 Apr 2015 09:11:35 GMT
 Content-Length: 556

 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <CORSConfiguration xmlns="http://obs.example.com/doc/2015-06-30/">
     <CORSRule>
         <AllowedMethod>POST</AllowedMethod>
         <AllowedMethod>GET</AllowedMethod>
         <AllowedMethod>HEAD</AllowedMethod>
         <AllowedMethod>PUT</AllowedMethod>
         <AllowedMethod>DELETE</AllowedMethod>
         <AllowedOrigin>obs.example.com</AllowedOrigin>
         <AllowedOrigin>www.example.com</AllowedOrigin>
         <AllowedHeader>AllowedHeader_1</AllowedHeader>
         <AllowedHeader>AllowedHeader_2</AllowedHeader>
         <MaxAgeSeconds>100</MaxAgeSeconds>
         <ExposeHeader>ExposeHeader_1</ExposeHeader>
         <ExposeHeader>ExposeHeader_2</ExposeHeader>
     </CORSRule>
 </CORSConfiguration>

last updated: 2024-12-11 10:27 UTC - commit: 1084b97f9d241d7af788bdfaa536dba9679533f7