CORS 在 Node js 中重定向到外部 URL 时出错

Question

我有一个节点 js 应用程序我在我的 index.js 文件中进行了以下配置

const app = express();
var cors = require("cors");

app.use(cors({ credentials: true, origin: "*" }));

app.use(function(req, res, next) {
  res.header("Access-Control-Allow-Origin", "*");
  res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
  next();
});

在我的 API 中，我试图重定向到外部 URL 如下所示

module.exports = async (req, res) => {
    try {
        let url = "https://externalurl.com";
        res.header("Access-Control-Allow-Origin", "*");
            res.redirect(encodeURI(url));
        res.header("Access-Control-Allow-Origin", "*");
            res.redirect(encodeURI(url));
    } catch (err) {
        return res.status(500).json({ msg: err });
    }
}
    

但它给了我下面的 CORS 错误

我如何解决它？ 请帮忙

 Access to XMLHttpRequest at 'https://externalurl.com' (redirected from 'https://myapplication/apis/v1/login/loginAuthentication') from origin 'https://myapplication.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

Answer 1

You can't trick a browser into treating B.com has having granted permission with CORS by making a request to a CORS-enabled A.com and then redirecting to B.com .

B.com必须自己明确授予权限。