如何允许特定域访问 drupal 7 API？

Question

我创建了一个服务，它提供有关订阅者的信息，但我想允许 2 或 3 个不同的应用程序访问此服务，而不是公众。

Answer 1

Cross-origin resource sharing (CORS) is a mechanism that allows a web page to make XMLHttpRequests to another domain. Such "cross-domain" requests would otherwise be forbidden by web browsers, per the same origin security policy.

you can use cors module

This module provides a configuration page to map domains to paths and add the necessary Access-Control-Allow-Origin header.