jquery ajax withcredentials,javascript - Cross domain jQuery ajax call with credentials - Stack Over...

I've followed the following steps:

Get the server to allow cross domain calls (with all the headers and stuff) This works

Test the server with some cross domain calls This works

Get the server to force a certificate This works

Go to a file on the server with a browser, choose the right certificate and see the file Still works

Now we get to the nice part

Combine the cross domain calls with the certificate

Problem

I am getting the certificate request from the browser, but when I select the same certificate as I do when using the browser, the call is made but I get a 403 Forbidden.

Code

$.ajax({

type: "POST",

xhrFields: {withCredentials: true},

dataType: "xml",

contentType: "text/xml; charset=\"utf-8\"",

url: "https://www.myOtherServer.com/testfile.asp",

});

Any ideas?

Edit

The Access-Control-Allow-Credentials: true and the Access-Control-Allow-Origin are properly configured.

Additional information

I'm starting to think that it has something to do with the content type. When I change it to "text/html" I get a 415 error, but I do really need to send xml because it is a SOAP server.

Response headers

Access-Control-Allow-Cred... true

Access-Control-Allow-Head... Content-Type, Origin, Man, Messagetype, Soapaction, X-Test-Header

Access-Control-Allow-Meth... GET,POST,HEAD,DELETE,PUT,OPTIONS

Access-Control-Allow-Orig... https://www.mywebsite.com

Access-Control-Max-Age 1800

Cache-Control private

Content-Length 5561

Content-Type text/html; charset=utf-8

Date Wed, 19 Dec 2012 15:06:46 GMT

Server Microsoft-IIS/7.5

X-Powered-By ASP.NET

Request headers

Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding gzip, deflate

Accept-Language nl,en-us;q=0.7,en;q=0.3

Access-Control-Request-He... content-type

Access-Control-Request-Me... POST

Cache-Control no-cache

Connection keep-alive

Host myhoast.com

Origin https://www.mywebsite.com

Pragma no-cache

User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0