I currently have some inline Visualforce pages on our Case page layout that retrieve case-related data from webservices on our corporate network using jQuery and AJAX, format it, and display it so that our Support reps have more data to troubleshoot cases with (data that doesn't live in Salesforce).
I'm starting to investigate Lightning Components as a way for us to write a next generation case management application (for desktops, not for mobile) and totally customize it for our specific needs.
However, I hit a snag yesterday when I found out that as part of the Lightning CSP/LockerService, making API calls from Lightning Components is restricted, unless you go through a server-side Apex controller. This would be difficult to do, because I doubt I could get the database or webservice punched through the corporate firewall and exposed to Salesforce.
So...is there ANY way right now to make API calls from Lightning Components and NOT go through an Apex controller?
If there's absolutely no way to do this (and a feature to do this isn't coming soon), is using Visualforce to serve up a SPA using another framework the next best option?
Any ideas appreciated - thanks!