跨域CORS 带Cookie通报,在nodejs + express中的详细完成

//server.js设置跨域接见

app.all('*', function(req, res, next) {
    res.header("Access-Control-Allow-Origin", req.headers.origin); //须要显现设置泉源
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
    res.header("Access-Control-Allow-Methods","PUT,POST,GET,DELETE,OPTIONS");
    res.header("Access-Control-Allow-Credentials",true); //带cookies
    res.header("X-Powered-By",' 3.2.1')
    res.header("Content-Type", "application/json;charset=utf-8");
    next();
});

//web.js

//原生
var xhr = new XMLHttpRequest();
xhr.open("post", "xxx/xxx", true);
xhr.withCredentials = true;//放在 open 要领背面比较靠谱
xhr.onload = function(){}
xhr.send("a=1&b=2");
//ajax
$.ajax({
        type:'get',
        url:"http://localhost:3000/logouts",
        dataType:"json",
        xhrFields: {
              withCredentials: true
              },
        success:function(data){
          console.log(data);
        }
      })  

参考文章:http://camnpr.com/server/2007…

    原文作者:小脑fu
    原文地址: https://segmentfault.com/a/1190000008275628
    本文转自网络文章,转载此文章仅为分享知识,如有侵权,请联系博主进行删除。
点赞