Off-Street Parking API Developer's Guide

Cross-Domain JavaScript Requests

Often, browsers prevent access to certain servers due to security restrictions. Cross-Domain JavaScript Requests allow developers to work around security restrictions that would prevent an application from contacting Off-Street Parking API directly. For example, certain location information might not be retrievable without enabling this method. In order to allow full accees to servers, the Off-Street Parking API provides a mechanism to enable client-side cross-origin requests that allow JavaScript resources to be fetched from another domain.

For details on how this mechanism operates, see Cross-Origin Resource Sharing. Off-Street Parking API currently uses all headers and parameters of this mechanism.

In order to support browser platforms which do not yet implement Cross-Origin Resource Sharing, GET requests can alternatively be made using JSONP. To use JSONP, your application simply supplies the name of its callback function in the jsoncallback or jsonpCallback query string parameter.

For example, to use JSONP to search Parking facilities with a callback named myCallbackFunction, you could make a request like the example below:

curl GET https://parking-v2.cit.cc.api.here.com
/parking/facilities.json
?prox=52.516667,13.383333,5000
&jsoncallback=myCallbackFunction
-H "Authorization: Bearer {YOUR_TOKEN}"

Note: The JSONP mechanism only works for GET requests. POST requests can only be made using the Cross-Origin Resource Sharing mechanism discussed above.