title: CORS Error in Pentaho 7.1 CE
body: <p>I am trying to integrate Pentaho 7.1 CE version with an Angular application and there I have to access the Pentaho context. For authentication purposes here, I am using a cookies-based API and passing the parameter. During this, I am getting the following error:</p>
  
  <blockquote>
    <p>XMLHttpRequest cannot load
    <a href="http://localhost:8083/pentaho/j_spring_security_check" rel="nofollow noreferrer">http://localhost:8083/pentaho/j_spring_security_check</a>. Redirect from
    '<a href="http://localhost:8083/pentaho/j_spring_security_check" rel="nofollow noreferrer">http://localhost:8083/pentaho/j_spring_security_check</a>' to
    '<a href="http://localhost:8083/pentaho/Home;jsessionid=E0B8FFAFE57EDEC09DB8229457FAA7B4" rel="nofollow noreferrer">http://localhost:8083/pentaho/Home;jsessionid=E0B8FFAFE57EDEC09DB8229457FAA7B4</a>'
    has been blocked by CORS policy: No 'Access-Control-Allow-Origin'
    header is present on the requested resource. Origin
    '<a href="http://localhost:4200" rel="nofollow noreferrer">http://localhost:4200</a>' is therefore not allowed access.</p>
  </blockquote>
  
  <p>I have already enable CORS in Pentaho and modified the <code>web.xml</code> file located at<br><code>pentaho-server\tomcat\conf</code>:</p>
  
  <pre><code>&lt;filter&gt;
    &lt;filter-name&gt;CorsFilter&lt;/filter-name&gt;
    &lt;filter-class&gt;org.apache.catalina.filters.CorsFilter&lt;/filter-class&gt;
    &lt;init-param&gt;
      &lt;param-name&gt;cors.allowed.origins&lt;/param-name&gt;
      &lt;param-value&gt;*&lt;/param-value&gt;
    &lt;/init-param&gt;
    &lt;init-param&gt;
      &lt;param-name&gt;cors.allowed.methods&lt;/param-name&gt;
      &lt;param-value&gt;GET,POST,HEAD,OPTIONS,PUT&lt;/param-value&gt;
    &lt;/init-param&gt;
    &lt;init-param&gt;
      &lt;param-name&gt;cors.allowed.headers&lt;/param-name&gt;
      &lt;param-value&gt;Content-Type,X-Requested-With,accept,Origin,Access-Control-Allow-Origin,Access-Control-Request-Method,Access-Control-Request-Headers&lt;/param-value&gt;
    &lt;/init-param&gt;
    &lt;init-param&gt;
      &lt;param-name&gt;cors.exposed.headers&lt;/param-name&gt;
      &lt;param-value&gt;Access-Control-Allow-Origin,Access-Control-Allow-Credentials&lt;/param-value&gt;
    &lt;/init-param&gt;
    &lt;init-param&gt;
      &lt;param-name&gt;cors.support.credentials&lt;/param-name&gt;
      &lt;param-value&gt;true&lt;/param-value&gt;
    &lt;/init-param&gt;
    &lt;init-param&gt;
      &lt;param-name&gt;cors.preflight.maxage&lt;/param-name&gt;
      &lt;param-value&gt;10&lt;/param-value&gt;
    &lt;/init-param&gt;
  &lt;/filter&gt;
  &lt;filter-mapping&gt;
    &lt;filter-name&gt;CorsFilter&lt;/filter-name&gt;
    &lt;url-pattern&gt;/*&lt;/url-pattern&gt;
  &lt;/filter-mapping&gt;
  </code></pre>
  
  <p>Can anyone suggest to me what I am missing here? Any idea how I can solve this problem?</p>