A Brief Overview of Cross-Origin Resource Sharing (CORS)

onlinecode

2 years ago

A Brief Overview of Cross-Origin Resource Sharing (CORS)

In this post, we will give you information about A Brief Overview of Cross-Origin Resource Sharing (CORS). Here we will give you detail about A Brief Overview of Cross-Origin Resource Sharing (CORS)And how to use it also give you a demo for it if it is necessary.

CORS is a protocol
that helps browsers determine whether it is safe to make an HTTP request to a different origin. Browsers restrict cross-origin requests from JavaScript, so if you use fetch() or Axios to make a request to an Express server that doesn’t use CORS, you’ll see the below error message:

Access to fetch at 'http://localhost:3000/' from origin 'http://localhost:5000' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

What Qualifies as Cross-Origin?

You can think of your origin as what shows up in the URL bar in your browser. For
example, suppose you have a browser tab open to http://localhost:5000/tutorials/fundamentals/pojo.

The following are considered cross-origin requests:

https://localhost:5000/test – Different protocol, http vs https
http://localhost:3000/test – Different port, 3000 vs 5000
http://google.com:5000/test – Different host, localhost vs google.com

In other words, any request whose protocol, host, and port don’t match what’s in the URL bar is considered cross-origin.(A Brief Overview of Cross-Origin Resource Sharing (CORS))

Setting Up CORS Support for A Brief Overview of Cross-Origin Resource Sharing (CORS)

You need to set up CORS on the server, like using the cors plugin for Express. If you’re trying to make an HTTP request to a server that
you don’t have access to, your only option is to create a proxy.

See also Compare Arrays in JavaScript

Most browsers make a preflight request using the HTTP OPTIONS request method (as opposed to GET or POST) to check for CORS headers. In order to support CORS, your server
needs to handle OPTIONS requests and set the Access-Control-Allow-Origin header
on the response.

Normally you would just use the cors npm module,
but this example shows how you can support cross-origin requests by simply setting
response headers, which should be easy in any web framework.

const app = require('express')();

// Need to handle 'OPTIONS' requests for pre-flight, A Brief Overview of Cross-Origin Resource Sharing (CORS)
app.options('*', (req, res) => {
  res.set('Access-Control-Allow-Origin', '*');
  res.send('ok');
});

// As well as set 'Access-Control-Allow-Origin' on the actual response
app.get('/', (req, res) => {
  res.set('Access-Control-Allow-Origin', '*');
  res.send('Hello, World!')
});
const server = await app.listen(3000);

JavaScript Fundamentals for A Brief Overview of Cross-Origin Resource Sharing (CORS)

JavaScript is a programming language that is used to create interactive web pages. It is a client-side scripting language, which means that it runs on the user’s browser. JavaScript can be used to add animation, interactivity, and functionality to web pages.

Here are some of the fundamentals of JavaScript:

Variables: Variables are used to store data. They are declared using the var keyword.
Data types: JavaScript has a variety of data types, including strings, numbers, booleans, objects, and arrays.
Operators: Operators are used to perform operations on data.
Control flow statements: Control flow statements allow you to control the order in which your code is executed.
Functions: Functions are blocks of code that can be reused.
Objects: Objects are used to store data in key-value pairs.
Arrays: Arrays are used to store data in a sequential order.
Events and event handlers: Events are notifications that are sent by the browser when something happens, such as when the user clicks on an element or moves the mouse over an element. Event handlers are functions that are called in response to an event.
DOM manipulation: The Document Object Model (DOM) is a tree-like structure that represents the elements of a web page. JavaScript can be used to manipulate the DOM to change the appearance or behavior of a web page.