{"action":"created","issue":{"url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/issues/70","repository_url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost","labels_url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/issues/70/labels{/name}","comments_url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/issues/70/comments","events_url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/issues/70/events","html_url":"https://github.com/OraOpenSource/apex-frontend-boost/issues/70","id":144986838,"number":70,"title":"403 Forbidden message with ORDS 3.0.4 (and possibly 3.0.3 too)","user":{"login":"mallkuma","id":9077588,"avatar_url":"https://avatars.githubusercontent.com/u/9077588?v=3","gravatar_id":"","url":"https://api.github.com/users/mallkuma","html_url":"https://github.com/mallkuma","followers_url":"https://api.github.com/users/mallkuma/followers","following_url":"https://api.github.com/users/mallkuma/following{/other_user}","gists_url":"https://api.github.com/users/mallkuma/gists{/gist_id}","starred_url":"https://api.github.com/users/mallkuma/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mallkuma/subscriptions","organizations_url":"https://api.github.com/users/mallkuma/orgs","repos_url":"https://api.github.com/users/mallkuma/repos","events_url":"https://api.github.com/users/mallkuma/events{/privacy}","received_events_url":"https://api.github.com/users/mallkuma/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/labels/documentation","name":"documentation","color":"d4c5f9"}],"state":"open","locked":false,"assignee":{"login":"vincentmorneau","id":5391291,"avatar_url":"https://avatars.githubusercontent.com/u/5391291?v=3","gravatar_id":"","url":"https://api.github.com/users/vincentmorneau","html_url":"https://github.com/vincentmorneau","followers_url":"https://api.github.com/users/vincentmorneau/followers","following_url":"https://api.github.com/users/vincentmorneau/following{/other_user}","gists_url":"https://api.github.com/users/vincentmorneau/gists{/gist_id}","starred_url":"https://api.github.com/users/vincentmorneau/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vincentmorneau/subscriptions","organizations_url":"https://api.github.com/users/vincentmorneau/orgs","repos_url":"https://api.github.com/users/vincentmorneau/repos","events_url":"https://api.github.com/users/vincentmorneau/events{/privacy}","received_events_url":"https://api.github.com/users/vincentmorneau/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/milestones/2","html_url":"https://github.com/OraOpenSource/apex-frontend-boost/milestones/2.1.0","labels_url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/milestones/2/labels","id":1463351,"number":2,"title":"2.1.0","description":"","creator":{"login":"martindsouza","id":2925726,"avatar_url":"https://avatars.githubusercontent.com/u/2925726?v=3","gravatar_id":"","url":"https://api.github.com/users/martindsouza","html_url":"https://github.com/martindsouza","followers_url":"https://api.github.com/users/martindsouza/followers","following_url":"https://api.github.com/users/martindsouza/following{/other_user}","gists_url":"https://api.github.com/users/martindsouza/gists{/gist_id}","starred_url":"https://api.github.com/users/martindsouza/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martindsouza/subscriptions","organizations_url":"https://api.github.com/users/martindsouza/orgs","repos_url":"https://api.github.com/users/martindsouza/repos","events_url":"https://api.github.com/users/martindsouza/events{/privacy}","received_events_url":"https://api.github.com/users/martindsouza/received_events","type":"User","site_admin":false},"open_issues":7,"closed_issues":1,"state":"open","created_at":"2015-12-16T15:06:15Z","updated_at":"2016-04-25T00:55:45Z","due_on":null,"closed_at":null},"comments":7,"created_at":"2016-03-31T18:53:48Z","updated_at":"2016-04-28T03:14:44Z","closed_at":null,"body":"Nothing wrong with apex-frontend-boost per se, but thought of just documenting this issue here for users using **apex-frontend-boost with ORDS 3.0.4**\r\n\r\nI have a VPS running on CentOS 7.2 on which I had installed ORDS 3.0.4 and APEX using OXAR. I use a Windows local machine with apex-frontend-boost running on it to watch changes to the assets. When I start a Gulp watch, soon after logging into the APEX application, I get **ORDS 403 Forbidden** message as shown below:\r\n\r\n![403](https://cloud.githubusercontent.com/assets/9077588/14186904/3f568128-f746-11e5-8a2f-105ce7a0708b.png)\r\n\r\nSeems like there is a documented issue [(https://community.oracle.com/message/13659147)](https://community.oracle.com/message/13659147) with static files and ORDS 3.0.3 and 3.0.4. Per Oracle, this issue has been fixed [(ORDS Bugs Fixed 304)](http://www.oracle.com/technetwork/developer-tools/rest-data-services/downloads/ords-bugsfixed-304-2895222.html) in ORDS 3.0.4 but it did not work me.\r\n\r\nAs a workaround, I had to rebuild the machine from scratch and use **ORDS 3.0.2** instead since OXAR does not come with an uninstall script yet [(OXAR issue # 31).](https://github.com/OraOpenSource/OXAR/issues/31) "},"comment":{"url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/issues/comments/215298689","html_url":"https://github.com/OraOpenSource/apex-frontend-boost/issues/70#issuecomment-215298689","issue_url":"https://api.github.com/repos/OraOpenSource/apex-frontend-boost/issues/70","id":215298689,"user":{"login":"tschf","id":1747643,"avatar_url":"https://avatars.githubusercontent.com/u/1747643?v=3","gravatar_id":"","url":"https://api.github.com/users/tschf","html_url":"https://github.com/tschf","followers_url":"https://api.github.com/users/tschf/followers","following_url":"https://api.github.com/users/tschf/following{/other_user}","gists_url":"https://api.github.com/users/tschf/gists{/gist_id}","starred_url":"https://api.github.com/users/tschf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tschf/subscriptions","organizations_url":"https://api.github.com/users/tschf/orgs","repos_url":"https://api.github.com/users/tschf/repos","events_url":"https://api.github.com/users/tschf/events{/privacy}","received_events_url":"https://api.github.com/users/tschf/received_events","type":"User","site_admin":false},"created_at":"2016-04-28T03:14:44Z","updated_at":"2016-04-28T03:14:44Z","body":"Is there a scenario where you've needed to set that `Access-Control-Allow-Origin-Header`.?\r\n\r\n```js\r\nres.setHeader('Access-Control-Allow-Origin', '*');\r\n```\r\n\r\nIf I comment it out, it works fine for me in all browsers.\r\n\r\nBut unsure on the reasoning for adding it in - maybe it was needed for some cases? \r\nI also tried using a value of `null`, and it too worked in Chrome - although, still seemed to be ignored when inspecting the network console. Odd.\r\n\r\n\r\n"}}