CORS anyway (node http)
const CORS_ALLOW_METHODS = [
'OPTIONS',
'GET',
'HEAD',
'POST',
'PUT',
'PATCH',
'DELETE'
];
const CORS_MAX_AGE = 86400;
function corsAnyway(req, res) {
if (!req.headers.origin) {
return;
}
if (req.method === 'OPTIONS') {
res.setHeader('Access-Control-Max-Age', CORS_MAX_AGE);
if (req.headers['access-control-request-method']) {
res.setHeader('Access-Control-Allow-Methods', CORS_ALLOW_METHODS.join(', '));
}
if (req.headers['access-control-request-headers']) {
res.setHeader('Access-Control-Allow-Headers', req.headers['access-control-request-headers']);
}
}
res.setHeader('Access-Control-Allow-Origin', req.headers.origin);
res.setHeader('Access-Control-Allow-Credentials', 'true');
}