Return-Path: Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: (qmail 23392 invoked from network); 7 Nov 2010 15:47:34 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 7 Nov 2010 15:47:34 -0000 Received: (qmail 18342 invoked by uid 500); 7 Nov 2010 15:48:04 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 18290 invoked by uid 500); 7 Nov 2010 15:48:03 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 18282 invoked by uid 99); 7 Nov 2010 15:48:02 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 07 Nov 2010 15:48:02 +0000 X-ASF-Spam-Status: No, hits=2.2 required=10.0 tests=FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of gsf747@gmail.com designates 74.125.82.180 as permitted sender) Received: from [74.125.82.180] (HELO mail-wy0-f180.google.com) (74.125.82.180) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 07 Nov 2010 15:47:56 +0000 Received: by wyg36 with SMTP id 36so1476800wyg.11 for ; Sun, 07 Nov 2010 07:47:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:sender:received :in-reply-to:references:date:x-google-sender-auth:message-id:subject :from:to:content-type:content-transfer-encoding; bh=ZWmS57vzjDj9g62atDqN3j2j2zDfmUFm2JTe151RFDE=; b=cnGGfEkTyM1GWqa3IrKquGzCGJItjGDkRNjq33hEDWmWUYD8GsBZ9I8WTmTyD5SVLI 49uJJSOlNBIZqrOrnFjWPOAuIhqtEVcBSwMrl4NlhV4p6Hk8P3XtJvpn1SgBz9qwUUEt e71Mj0FFspW4R21dCuGdzuih8Lof78hCURsbM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type :content-transfer-encoding; b=AW95G9dDHxKHaKfCAq0F17DHHlcrkmWVsdr5f5hSbFH1w2RSgAlIx7AHEMTGQuCfKt z2bBUy+NOrhVqa/FTnnZkeDf6vOjPicJDrIb/QB3ctDhqiltfbOvkx2je+hhBZ6l89PO UK/xFqBfu8mV4i26yceDCtUf+txFduedRI4SM= MIME-Version: 1.0 Received: by 10.216.59.77 with SMTP id r55mr2677663wec.6.1289144855857; Sun, 07 Nov 2010 07:47:35 -0800 (PST) Sender: gsf747@gmail.com Received: by 10.216.239.142 with HTTP; Sun, 7 Nov 2010 07:47:35 -0800 (PST) In-Reply-To: References: Date: Sun, 7 Nov 2010 10:47:35 -0500 X-Google-Sender-Auth: T78o466EtxLr_s3e-ja-oNq2g2E Message-ID: Subject: Re: CouchDB hosting services and same-domain origin From: Gabriel Farrell To: user@couchdb.apache.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Virus-Checked: Checked by ClamAV on apache.org If you're wondering how to do this for a CouchApp, you might look at the setup Mikeal talks about (NodeJS behind CouchDB) at http://jsconf.eu/2010/speaker/nodejs_couchdb_crazy_delicious.html (especially at around 12:15). On Fri, Nov 5, 2010 at 3:41 PM, couchdb user wrote: > Hi Marcus, > > the same-domain origin policy is only for javascript, you can have > your database on CouchOne or Cloudant, and have another server hosting > your application (PHP, Java, etc). > > Unless I misunderstood your email > > =C2=A0Regards, > > > > On Fri, Nov 5, 2010 at 3:21 PM, Wordit Ltd wrot= e: >> Can anyone confirm this please. There seems to be one limitation to >> using a CouchDB hosting service like CouchOne or Cloudant. To use >> online payment systems, or third-party authentication, server-side >> scripting is required e.g. using PHP. >> You cannot do these actions on another server because the same-domain >> origin policy prevents this. >> >> Or is there any way to retrieve info like Paypal payments or OpenID >> authentication on one server and then securely pass that info to the >> database on the hosting service? >> >> Thanks, >> >> Marcus >> >