# oss-in-browser **Repository Path**: mirrors_aliyun/oss-in-browser ## Basic Information - **Project Name**: oss-in-browser - **Description**: Play with OSS, right in browser! - **Primary Language**: Unknown - **License**: Not specified - **Default Branch**: master - **Homepage**: None - **GVP Project**: No ## Statistics - **Stars**: 0 - **Forks**: 0 - **Created**: 2020-08-08 - **Last Updated**: 2025-10-11 ## Categories & Tags **Categories**: Uncategorized **Tags**: None ## README # OSS in Browser Play with OSS right in the browser! ![Demo](screenshot.png?raw=true "OSS in Browser") ## Browser support - IE >= 10 & Edge - Major versions of Chrome/Firefox/Safari - Major versions of Android/iOS/WP ## Setup ### Bucket setup As browser-side javascript involves CORS operations. You need to setup your bucket CORS rules to allow CORS operations: - set allowed origins to '*' - allowed methods to 'PUT, GET, POST, DELETE, HEAD' - set allowed headers to '*' - expose 'ETag' in expose headers ### STS setup As we don't want to expose the accessKeyId/accessKeySecret in the browser, a [common practice][oss-sts] is to use STS to grant temporary access. ### App setup Fill in your appServer address and bucket name in `app.js`: ```js var appServer = ''; var bucket = ''; var region = 'oss-cn-hangzhou'; ``` And then open `index.html` in your browser. ### STS App server A sample app server can be found [here][node-sts-app-server]. ### IE Compatibility You may need include the promise polyfill for IE: ```html ``` [node-sts-app-server]: https://github.com/rockuw/node-sts-app-server [oss-sts]: https://help.aliyun.com/document_detail/oss/practice/ram_guide.html