Over a million developers have joined DZone.
{{announcement.body}}
{{announcement.title}}

Enabling CORS on Node JS

DZone's Guide to

Enabling CORS on Node JS

This post shows how to enable Cross Origin Resource Sharing CORS in Node. CORS essentially means cross-domain requests. Read on and see how it's done.

· Web Dev Zone ·
Free Resource

Start coding something amazing with our library of open source Cloud code patterns. Content provided by IBM.

This post shows how to enable Cross Origin Resource Sharing CORS in Node. CORS essentially means cross-domain requests.

Simply using this line of code to set a header on your response will enable CORS.

res.header("Access-Control-Allow-Origin", "*");

This code snippet, however, would enable CORS for all resources on your server.

app.use(function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  next();
});

This can also be used for resource files as you can see here.

app.get('/test', function(req, res){
  var file = __dirname + '/MyFile.zip';
  res.download(file); // Set disposition and send it.
});

Here is the code of a complete example:

var express = require('express');

var app = express();
app.use(function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  next();
});

app.get('/', function (req, res) {
  var data = {
    "Fruits": [
      "apple",
      "orange"    ]
  };

  res.json(data);
});

app.get('/test', function(req, res){
  var file = __dirname + '/ZipFile.zip';
  res.download(file); // Set disposition and send it.
});

Code something amazing with the IBM library of open source blockchain patterns. Content provided by IBM.

Topics:
cors ,cors enabled ,node ,node js

Published at DZone with permission of

Opinions expressed by DZone contributors are their own.

{{ parent.title || parent.header.title}}

{{ parent.tldr }}

{{ parent.urlSource.name }}