Setting Up CORS Filter in JIRA

Sometimes Structure Gadget fails to load correctly in Confluence. You might see missing icons or the application can fail to work.

This may happen because of a known JIRA issue that prevents Structure gadget from loading resources from JIRA when it's being served in Confluence on another web domain.

To work around that problem, you can set up CORS filter in the Tomcat server that runs JIRA (Nginx users may want to consider this alternative Nginx Configuration Option):

1. Copy cors-filter-2.4.jar, java-property-utils-1.9.1.jar from CORS docs to the /lib directory under JIRA's installation folder.

2. Edit file JIRA_INSTALL_DIR/atlassian-jira/WEB-INF/web.xml and add the following:

    <!-- ==================== CORS configuration ====================== -->
   <filter>
   	<filter-name>CORS</filter-name>
   	<filter-class>com.thetransactioncompany.cors.CORSFilter</filter-class>
       <init-param>
           <param-name>cors.allowOrigin</param-name>
           <param-value>http://YOUR-CONFLUENCE-DOMAIN.com</param-value>  <!-- use http: or https: depending on your configuration -->
       </init-param>
       <init-param>
           <param-name>cors.supportedMethods</param-name>
           <param-value>GET, POST, HEAD, OPTIONS, PUT, DELETE</param-value>
       </init-param>
   </filter> 
   <filter-mapping>
       <filter-name>CORS</filter-name>
       <url-pattern>/*</url-pattern>
   </filter-mapping>

3. Restart JIRA