Service-Request not saved in catalog after submit

Products

• CA Service Management - Service Desk Manager
• CA Service Desk Manager
• CA Service Catalog
• CA Service Desk Manager - Unified Self Service

Issue/Introduction

Requesting an offering with ServicePoint/USS/widget does not create request when submitting in ServicePoint.

Submit-button in form remains grey and does nothing

The following error appears in F12 Developer Tool Console tab:

Access to XMLHttpRequest at 'http://<Catalog_Hostname>:<port>/usm/wpf?Node=icguinode.submitservicerequest&b2b=json&sh=TfsjM9XqBuy4Vm9u7krNw67n%2Bws%3D&portal=true&locale=en-US' from origin 'http://<ServicePoint_Hostname>:<port>' has been blocked by CORS policy: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.

Environment

Release : 17.2

Component : CA SERVICE CATALOG

Cause

After each patch upgrade the post installation steps are erased in web.xml file

Resolution

In catalog USM_HOME\view\webapps\usm\WEB-INF\web.xml, change the CORSFilter to original host name as below and restart the catalog services.

For customer the Service Point URL should reflect all Hostnames (xFlow URL is a DNS Alias, so need to complete similar configuration with xFlow DNS alias, USS DNS Alias,  Catalog DNS Alias,  and all appropriate hostnames etc)

param-value to be changed as below
==================================================================
  <filter>
  <filter-name>CorsFilter</filter-name>
  <filter-class>org.apache.catalina.filters.CorsFilter</filter-class>
  <init-param>
    <param-name>cors.allowed.origins</param-name>
    <param-value>http://<HOSTNAME>:9002,http://<HOSTNAME>:8686,http://<HOSTNAME>:8080,http://<HOSTNAME>:8070,http://<HOSTNAME>.bpc.broadcom.net:9002,http://<HOSTNAME>.bpc.broadcom.net:8686,http://<HOSTNAME>.bpc.broadcom.net:8080,http://<HOSTNAME>.bpc.broadcom.net:8070</param-value>
  </init-param>
  <init-param>
    <param-name>cors.allowed.methods</param-name>
    <param-value>GET,POST,HEAD,OPTIONS</param-value>
  </init-param>
  <init-param>
    <param-name>cors.allowed.headers</param-name>
    <param-value>Content-Type,X-Requested-With,accept,Origin,Access-Control-Request-Method,Access-Control-Request-Headers</param-value>
  </init-param>
  <init-param>
    <param-name>cors.exposed.headers</param-name>
    <param-value>Access-Control-Allow-Origin,Access-Control-Allow-Credentials</param-value>
  </init-param>
  <init-param>
    <param-name>cors.support.credentials</param-name>
    <param-value>true</param-value>
  </init-param>