Over a million developers have joined DZone.
{{announcement.body}}
{{announcement.title}}

Enabling CORS on Node JS

DZone's Guide to

Enabling CORS on Node JS

This post shows how to enable Cross Origin Resource Sharing CORS in Node. CORS essentially means cross-domain requests. Read on and see how it's done.

· Web Dev Zone ·
Free Resource

Deploying code to production can be filled with uncertainty. Reduce the risks, and deploy earlier and more often. Download this free guide to learn more. Brought to you in partnership with Rollbar.

This post shows how to enable Cross Origin Resource Sharing CORS in Node. CORS essentially means cross-domain requests.

Simply using this line of code to set a header on your response will enable CORS.

res.header("Access-Control-Allow-Origin", "*");

This code snippet, however, would enable CORS for all resources on your server.

app.use(function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  next();
});

This can also be used for resource files as you can see here.

app.get('/test', function(req, res){
  var file = __dirname + '/MyFile.zip';
  res.download(file); // Set disposition and send it.
});

Here is the code of a complete example:

var express = require('express');

var app = express();
app.use(function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  next();
});

app.get('/', function (req, res) {
  var data = {
    "Fruits": [
      "apple",
      "orange"    ]
  };

  res.json(data);
});

app.get('/test', function(req, res){
  var file = __dirname + '/ZipFile.zip';
  res.download(file); // Set disposition and send it.
});

Deploying code to production can be filled with uncertainty. Reduce the risks, and deploy earlier and more often. Download this free guide to learn more. Brought to you in partnership with Rollbar.

Topics:
cors ,cors enabled ,node ,node js

Published at DZone with permission of

Opinions expressed by DZone contributors are their own.

{{ parent.title || parent.header.title}}

{{ parent.tldr }}

{{ parent.urlSource.name }}