Request for Wildcard FQDN to Whitelist for Merge API

Which product are you using?

PDF.js Express Plus

PDF.js Express Version

UI version 6.3.3
Core version 6.3.4

Detailed description of issue
We are using the PDF.js Express Merge API in our application to process files. Our client has implemented strict network policies that only allow outbound access to whitelisted domains.

Currently, we are passing files to the Merge API using our client’s Oman-hosted endpoint:

https://mft.medcoman.com:5443/rest/forms/v1/FIleUpload/payload/d5517357-466c-465d-a048-7d783c8e686f/file/075ba8b5-3e40-491a-ab0f-32aa7b294a52

When Merge attempts to fetch this file, the request fails with the following error:

{“error”:{“code”:21,“message”:“Cannot retrieve file from URL.”}}

The root cause is that our client needs to whitelist PDF.js Express servers to allow them to fetch the file. However, since the IP addresses of PDF.js Express servers may change, we cannot rely on static IPs.

Request:
Could you please provide us with the wildcard FQDN (e.g., *.pdfjs.express or equivalent) used by the Merge API servers so that our client can whitelist it instead of IP addresses?

This will ensure that Merge API requests from PDF.js Express can retrieve our hosted files without interruption.

Thank you for your assistance.

Expected behaviour

Hey there,

Outbound requests from our servers (or any servers) do not have a domain name associated with them, so we unfortunately cannot provide this information for you. Our infrastructure also does not have static IP addresses so whitelisting by IP won’t be an option either.

The only viable option I see here is for your client to allow requests based on the request headers. You can provide custom headers that are forwarded when requesting the remote file - Forwarding headers | Documentation.

Cheers,

Logan