CORS 标头问题 express Angular

Question

In dev this works fine, i recently update the code in my vps and I'm getting an error in console: Acces to XMLHttpRequest at 'https://www.example.con/api/register' from origin 'https://example.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. I tryed with :

 app.use((req, res, next) => { res.header('Access-Control-Allow-Origin', '*'); res.header('Access-Control-Allow-Headers', 'Authorization, X-API-KEY, Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Request-Method'); res.header('Access-Control-Allow-Methods', 'GET, POST, OPTIONS, PUT, DELETE'); res.header('Allow', 'GET, POST, OPTIONS, PUT, DELETE'); next(); });

and: app.use(cors()); but i'm still having the same message in console.

 noAuthHeader = { headers: new HttpHeaders({ 'NoAuth': 'True' }) }; postUser(user: User){ return this.http.post(this.url + '/register', user, this.noAuthHeader); }

 register: (req, res, next) => { let user = new User(); user.email = req.body.email; user.password = req.body.password; user.domain = req.body.domain; user.save((err, doc) => { if (!err) res.send(doc); else { if (err.code == 11000) { if(err.keyValue.hasOwnProperty('domain')){ res.status(422).send(['Name repeated']); } if(err.keyValue.hasOwnProperty('email')){ res.status(422).send(['Email repeated']); } } else { return next(err); } } }); },

The modifications i've been made in code is the verification in register() api. I'm using mongo DB and checking error code 11000 for repeated unique model data in DB (email & domain fields). Console throws CORS error when i try to register a duplicate email or domain.

EDITED: I'm getting this error in console:

/home/myapp_full/myapp_v0.2/node_modules/mongoose/lib/helpers/promiseOrCallback.js:19 throw error; ^ TypeError: Cannot read property 'hasOwnProperty' of undefined.

Answer 1

I don't think you should need CORS unless you actually intend to have two separate websites: www.example.com and example.com .

If, instead, your server is set up to accept requests from both, and doesn't redirect, I'd recommend that you handle redirects in your code wherever possible, so that you select one canonical URL: Either example.com or www.example.com . Barring that, as long as the script exists on both servers, just load the script without the URL (aka "/register" , not this.url + "/register" )

Answer 2

One time i had the same issue with Angular and i resolved it deleting the CORS headers in the back-end. I hope that works for you.

Answer 3

Solved: It seems that Linux and windows throws different error messages, i modified this piece of code and it's working fine, anyways the response is just 'email or name repeated' and i would like to handle each unique data, i'm still waiting for an upgrade, thanks for your time.

 user.save((err, doc) => { if (!err) res.send(doc); else { if (err.code == 11000) { res.status(422).send(['Email or name repeated']); } else { return next(err); } } });