Cors 在 express.js 中配置，但在登录凭据后仍然出错

Question

i have configured cors headers in express js app login route as bellow:

106 app.post('/login', function(req, res, next) {
107     res.header('Access-Control-Allow-Credentials', true);
108     res.header('Access-Control-Allow-Origin', 'http://localhost:3100');
109     res.header('Access-Control-Allow-Methods', 'POST');
110     res.header('Access-Control-Allow-Headers', 'Content-Type, Authorization');
111     passport.authenticate('local', function(err, user, info) {
112     res.send(info)
113     })(req, res, next);
114   });

I'm making this request:

const logIn = async (email, password) => {
    try{
        await axios.post('https://socialback.bieda.it/login', {email, password}, {withCredentials: true}).then((res)=> console.log(res.data));

    } catch(e) {
        console.log(e)
    }
}

And i'm still getting cors error:

Access to XMLHttpRequest at 'https://socialback.bieda.it/login' from origin 'http://localhost:3100' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I'm googling this error but with no result, i have no idea what to do.

What i tried

1. in allow-origin typing ip-adress, localhost, localhost with /login
2. in allow-origin "*" is not working due to wilcard error

Answer 1

You have enabled CORS from http://localhost:3100 but you are calling https://socialback.bieda.it from your client code

res.header('Access-Control-Allow-Origin', 'http://localhost:3100');

While your client sends a request to different server

await axios.post('https://socialback.bieda.it/login', {email, password}, {withCredentials: true}).then((res)=> console.log(res.data));