• Replies 1 reply
  • Subscribers 0 subscribers
  • Views 8 views
  • Users 0 members are here
Options
3sides - Social sharing widget
Related

Question: Do the HighQ APIs support OIDC flow and CORS?

Darren Chappell
27261

We are looking to build a bowser application that calls on the HighQ APIs to get Matter Details and have a number of questions which will help drive our design:

Do the HighQ APIs support OIDC authentication?

Is it possible to configure CORS on HighQ?

The following pages describe the Login flow. Is there a similar definition for the log out flow?

knowledge.highq.com/.../automatically-login-to-another-application

Parents
  • Thomson Reuters Thomson Reuters staff member

    Hi Darren Chappell, please accept my apologies for missing this. If you ever have an urgent enquiry, please raise a support ticket directly and we will respond within SLA time.

    Do the HighQ APIs support OIDC authentication?

    ... After having looked into our (non-client facing) documentation, we do appear to have a limited implementation of some OIDC-type endpoints. These may be for our internal use only. I have currently raised an issue with our developers to get clarity on this and can report back here as soon as I know.

    Is it possible to configure CORS on HighQ?

    No is the short answer. A small subset of our clients do have trouble calling the API from more modern 'component-based' JS frameworks (like React), as you'll run into this problem: https://medium.com/@dtkatz/3-ways-to-fix-the-cors-error-and-how-access-control-allow-origin-works-d97d55946d9 (only solution would be to hand off to your own proxy). Its something which has been marked for improvement. The reason we can't support this is due to a quirk of our infrastructure (I am told!)

    CC Andy Onu & Anthony Kay  for visibility as we discussed both of these topics on a call today!

    For my own reference: TSI-4543

Reply
  • Thomson Reuters Thomson Reuters staff member

    Hi Darren Chappell, please accept my apologies for missing this. If you ever have an urgent enquiry, please raise a support ticket directly and we will respond within SLA time.

    Do the HighQ APIs support OIDC authentication?

    ... After having looked into our (non-client facing) documentation, we do appear to have a limited implementation of some OIDC-type endpoints. These may be for our internal use only. I have currently raised an issue with our developers to get clarity on this and can report back here as soon as I know.

    Is it possible to configure CORS on HighQ?

    No is the short answer. A small subset of our clients do have trouble calling the API from more modern 'component-based' JS frameworks (like React), as you'll run into this problem: https://medium.com/@dtkatz/3-ways-to-fix-the-cors-error-and-how-access-control-allow-origin-works-d97d55946d9 (only solution would be to hand off to your own proxy). Its something which has been marked for improvement. The reason we can't support this is due to a quirk of our infrastructure (I am told!)

    CC Andy Onu & Anthony Kay  for visibility as we discussed both of these topics on a call today!

    For my own reference: TSI-4543

Children
No Data