跨域ajax请求失败，并由对等方重置

Question

I have following configuration. Website on domain1 makes ajax-request (jQuery.ajax) to API on domain2, I can see in error_log api script works fine, but sniffer on client side detects Reset by peer error with no response body. This is strange case because there are lot of other similar websites communicating with this api via cross domain request and everything's ok. Can someone give me the clue how to track this? I'm supplying all necessary http-headers on server

<?php      
  header('Access-Control-Allow-Origin: *');
  header('Access-Control-Allow-Methods: GET');
  header('Access-Control-Allow-Headers: Origin,cache-control,content-type,man,messagetype,soapaction');

Answer 1

Is there an allowed list on the other side? I would think so because this: 'Access-Control-Allow-Origin: *' is not recommended.

Hope this helps.

FYI, read this: http://enable-cors.org/ cross domain is a two way street apparently. It helped me a lot

Answer 2

I think what you need is JSONP, JSONP is allowed to make CORS calls since they have a different origin policy, if you are using jQuery it has built in functions for that.

See http://api.jquery.com/jquery.getjson/ and http://api.jquery.com/jQuery.ajax/ (the jsonp stuff options)