Forums/Community/Zendesk API

Answered

Feature request: JSONP

Mike Gorney
asked this on November 05, 2010 14:35

Or is that considered to much of a security risk?

 

Comments

User photo
Tim Whidden
vindico

I've found that, though it's not documented, the REST API supports JSONP.

Try it: subsitute .json for .xml and add "?callback=mycallback." Voila, there it is. 

It would be nice to hear that it's officially supported before I start relying on it however...

 

February 09, 2011 11:07
User photo
Steven Yan
Product Manager

Hi Tim, we do support JSONP in /api/v1, but have currently removed it in /api/v2 until we further investigate security.  We'll let you know if we decide to officially support it.

April 26, 2012 21:46
User photo
Steven Yan
Product Manager
Check Answer

Update: we will be supporting JSONP for public resources, e.g. retrieving public forums or public forum topics.  Outside of that we do not feel it's secure and will add CORS support for other cross-domain requests.

May 09, 2012 08:36
User photo
Lars Morten Nygaard

Hi.

What's the latest on the CORS implementation mentioned above?

LarsM

June 05, 2012 05:41
User photo
Steven Yan
Product Manager

Hi Lars, nothing yet on CORS.

June 05, 2012 20:18
User photo
Lars Morten Nygaard

Thanks for quick feedback.

Does that mean no support for cross-domain in API v2 in any shape or form at the moment?

Still plan to add CORS in the end?

June 05, 2012 23:26
User photo
Steven Yan
Product Manager

Hi Lars, that's correct, currently there's no support for cross-domain requests in API v2 at the moment.  We still do plan on adding CORS.

June 05, 2012 23:59
User photo
Kleber Shimabuku
akatus

Hi Steven, any news on this?

December 20, 2012 03:00