Skip to main content
T
TW_105998767-Bedrock
7-Bedrock
February 7, 2025
Question

CROSS ORIGIN Request In Thingworx

  • February 7, 2025
  • 2 replies
  • 1553 views

We can allow other IPs to use the ThingWorx REST API by enabling cross-origin access. I tried modifying the web.xml file, but I couldn't get it to work. Can anyone help me?

2 replies

Rocko
Rocko19-Tanzanite
19-Tanzanite
February 7, 2025

Thingworx REST API is open to anyone to be used. CORS is a browser concept, not on the HTTP level where REST API works.

You will need an application key to get access, and this application key supports IP whitelisting, but it's not populated by default, which means if you don't fill in an IP (list), anyone can access.

So if you have issues accessing with an appkey, check the app key if that field is populated.

    T
    TW_105998767-BedrockAuthor
    7-Bedrock
    February 7, 2025

    I am using a web application that I developed to query the ThingWorx API and display the data on my web page. This is causing the issue. Is there a way to fix it?

     

    T
    TonyZhang16-Pearl
    16-Pearl
    February 26, 2025

    Hi @TW_10599876,

     

    What ThingWorx API are you querying?

    What is the exact issue you have observed when querying the API? Could you please provide some screenshots to elaborate?

     

    N
    nmutter16-Pearl
    16-Pearl
    February 26, 2025

    There is this article which I successfully used to allow CORS before: https://www.ptc.com/en/support/article/CS229450

    Make sure to follow it completely as there are items like `As of ThingWorx Platform 8.5 and up, it is also necessary to...` which also need to be done if applicable 🙂

    T
    TW_105998767-BedrockAuthor
    7-Bedrock
    February 27, 2025

    I'm using ThingWorx version 9.3.4. I've tried configuring it according to various forum discussions, but the issue persists.

    N
    nmutter16-Pearl
    16-Pearl
    February 28, 2025

    I did not have an issue hm. You did restart Tomcat after editing the file I bet?

    Not so sure if the file contains any 'secrets' but maybe you want to share it with us? Best would be original version and modified on. But make sure nothing confidential is in it. I am not sure...

     

    Could you also share the exact error you get? With censored domain names. (just to double check its not mixed content error or something ;))

      Terms & ConditionsCookie settingsAccessibility statement