usefulTips

Useful configuration tips

sas.commons.web.security

You can set these thru SASEnvironment Manager if you have admin priveleges.

1. CORS

   • allowCredentials Set this to true
   • Allowed Origins - set this to meet your needs.A * will leave this wide open to all clients. Talk to your site administrator.

2. cookies

   • sameSite Critical for browsers like Chrome. For VA-SDK you need to set this to None

3. CSRF

   • allowed URI A sample is shown below. Use your expertise in regex to specify the allowed uris.

        http(s?)[:]\/\/([^\.]+\.)*acme\.com,http(s)*[:]\/\/localhost([:])*\d*

A special note on self-signed certificates in Viya Server

If your Viya server has the self-signed certificate then use this option with store.initStore

let store = restaf.initStore({rejectUnauthorized: false});