Extjs 如何从rally sdk（自定义html代码）发出CORS原始呼叫请求？

我正在使用rally sdk开发一个自定义html仪表板，我想填充来自CORS原始请求调用的一个字段数据

您能否提供一些示例/链接，说明如何使用rally sdk自定义html代码进行CORS调用

我尝试通过ajax调用它给我403异常

var usChangeSets = story.getCollection('Changesets');
            console.log('usChangeSets--',usChangeSets);         
            usChangeSets.load({
                fetch : ['Author', 'Message', 'Uri'],
                callback: function(records, operation, success){
                    Ext.Array.each(records, function(changeset){                                           
                       //Ajax api call to get details from external link
                        var blink ="https://[sonarqube]/job/Appdev/job/TestProject/api/json";                       
                         Ext.Ajax.request({
                                url: blink, 
                                method :'GET',
                                crossDomain: true,
                                withCredentials: true,  
                                headers : { 
                                    'Authorization': 'Basic dsasfsfxfhfj',
                                     'Content-Type': 'application/json;charset=UTF-8',
                                     'Access-Control-Allow-Origin' : '*'
                                },
                                success: function(response){
                                    var backToJs=JSON.parse(response.responseText);
                                        console.log('resp data-',backToJs);
                                        //console.log(backToJs['QueryResult'].Results);

                                },
                                failure: function(response) {
                                    console.log('ajax call failure');
                                }
                            });                                
                        }
            }
}

---

您需要配置外部服务器以允许CORS请求。浏览器将自动将

源站

标题添加到您的请求中，然后您的服务器应使用相应的cors标题（

访问控制允许源站

）进行响应

以下是rally服务器如何响应来自不同来源的请求的示例：

% http https://rally1.rallydev.com/slm/webservice/v2.0/testcaseresult/54277371431 zsessionid:_5507Kn8 origin:localhost -v
GET /slm/webservice/v2.0/testcaseresult/54277371431 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Host: rally1.rallydev.com
User-Agent: HTTPie/0.9.9
origin: localhost
zsessionid: _55GAn8



HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: localhost
Access-Control-Expose-Headers:
CF-RAY: 38cbe03c4dd45005-DEN
Cache-Control: private,max-age=0,must-revalidate
Connection: keep-alive
Content-Encoding: gzip
Content-Length: 623
Content-Type: application/json;  charset=utf-8
Date: Fri, 11 Aug 2017 14:27:29 GMT
ETag: "0b0e0cdae135fc6cd32fa496d7660c756"
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NON DSP COR CURa PSAa PSDa OUR NOR BUS PUR COM NAV STA"
RallyRequestID: qs-app-103xz471u80pea8opfovz9g8gv.qs-app-1014978663
Server: cloudflare-nginx
Set-Cookie: __cfduid=d604a6a0fa131613b997640ead95cc5171502461649; expires=Sat, 11-Aug-18 14:27:29 GMT; path=/; domain=.rallydev.com; HttpOnly
Set-Cookie: JSESSIONID=qs-a0;Path=/;Secure;HttpOnly
Set-Cookie: SUBBUCKETID=209;Path=/;Domain=rally1.rallydev.com;Secure;HttpOnly
Set-Cookie: SUBSCRIPTIONID=209;Path=/;Domain=rally1.rallydev.com;Secure;HttpOnly
Set-Cookie: SERVERID=319fca23748f5704e88bd8741ae60476b188cf5e; path=/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload;
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block

请使用编辑/更新您的问题，并粘贴到您在浏览器devtools控制台中看到的确切错误消息中。