如何使用cors起源和角度的会话？

Question

My session work fine until i tried to allow cors.

Server:

  app.use(require('express-session')({
    secret: 'some key',
    resave: true,
    saveUninitialized: true,
    proxy: true,
    cookie: {
      secure: false,
      httpOnly: false,
    },
  }));

 app.use(require('cors')());
 @Get('getUserAuthenticated')
 async getUserAuthenticated(@Req() req): Promise<{ user: User }> {
    return { user: req.user };
 }

And i use proxy:

{
    "/rest": {
      "target": "http://localhost:3000",
      "secure": true,
      "logLevel": "debug",
      "changeOrigin": true,
    }
}

getUserAuthenticated is empty when i using cors. i need it to develop purpose, so what i miss else?

Answer 1

you should use

{ origin:true, withCredentials:true }

this allows to pass cookies arround

Answer 2

For someone that trying to do the same:

server:

  const corsOptions = {
    origin: 'http://localhost:4200',
    optionsSuccessStatus: 200,
    credentials: true,
  };
  app.use(require('cors')(corsOptions));

client:

get(url) { return this.httpClient.get(url, { withCredentials: true })